ClipBucket ≤5.5.0 Unauthenticated Arbitrary File Upload Leading to RCE (CVE-2025-55912)

Key Information Summary Vulnerability Overview CVE ID: CVE-2025-55912 Vulnerability Type: Unauthenticated Arbitrary File Upload Leading to Remote Code Execution (RCE) Affected Versions: ClipBucket ≤ 5.5.0 Impact Vulnerability Type: Unauthenticated Arbitrary File Upload (CWE-434) → Remote Code Execution (RCE) Impact Scope: Full server compromise via unauthenticated code upload and execution of PHP payloads. High severity. Details Description: ClipBucket’s endpoint allows multipart uploads without enforcing authentication and without sufficient file type or content validation. Attackers can upload a PHP payload; if stored in a web-accessible location and executed, it leads to RCE. PoC: PHP webshell can be uploaded without authentication. Mitigation Measures Authentication & Authorization: Implement authentication and authorization on upload endpoints; disallow unauthenticated uploads. File Extension Restrictions: Enforce server-side validation to allow only a predefined list of safe file extensions and reject script uploads. File Storage: Store uploaded files outside the web root directory, or ensure files served via proxy have limited execution permissions (e.g., store in log directories or set appropriate permissions to prevent execution). Content Handling: If PHP files must be stored in the web root, ensure the server does not execute user-uploaded files (use separate processors or content handling mechanisms). Scanning & Restrictions: Add server-side scanning (antivirus, MIME type checks) and restrict accepted subtypes. References https://github.com/Mozhdehsolanki/clipbucket<=5.5.0 CVE-CVET-2025-55912 Discovery & Disclosure Discoverer: Mohd Mozhdehsolanki Solanki (@0x63rty3r) CVE ID: CVE-2025-55912 Vendor Notification: Notified via GitLab

Goal Reached Thanks to every supporter — we hit 100%!

ClipBucket ≤5.5.0 Unauthenticated Arbitrary File Upload Leading to RCE (CVE-2025-55912)