---
cve: "CVE-2025-46093"
severity: "CRITICAL"
cvss: 9.9
epss: "0.6%"
vendor: "LiquidFiles"
kev: false
exploited: false
published: "2025-08-04 23:15:28"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-11-10T12:03:31+01:00"
---

# CVE-2025-46093

> 9.9 CRITICAL · 🧪 PoC

## Beschreibung

LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration.

## CNA-Record (Kanon, cvelistV5)

- CNA: **mitre**
- State: PUBLISHED
- Stand: 2025-08-05 16:22:50
- CNA-CVSS: **9.9** (`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **poc**
  - Automatable: **no**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-732** — Incorrect Permission Assignment for Critical Resource
  The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

## Angriffsmuster (CAPEC)

- [CAPEC-1 — Accessing Functionality Not Properly Constrained by ACLs](https://capec.mitre.org/data/definitions/1.html) _(Severity: High)_
- [CAPEC-17 — Using Malicious Files](https://capec.mitre.org/data/definitions/17.html) _(Severity: Very High)_
- [CAPEC-60 — Reusing Session IDs (aka Session Replay)](https://capec.mitre.org/data/definitions/60.html) _(Severity: High)_
- [CAPEC-122 — Privilege Abuse](https://capec.mitre.org/data/definitions/122.html) _(Severity: Medium)_
- [CAPEC-127 — Directory Indexing](https://capec.mitre.org/data/definitions/127.html) _(Severity: Medium)_
- [CAPEC-180 — Exploiting Incorrectly Configured Access Control Security Levels](https://capec.mitre.org/data/definitions/180.html) _(Severity: Medium)_
- [CAPEC-206 — Signing Malicious Code](https://capec.mitre.org/data/definitions/206.html) _(Severity: Very High)_
- [CAPEC-234 — Hijacking a privileged process](https://capec.mitre.org/data/definitions/234.html) _(Severity: Medium)_

## ATT&CK-Techniken

- [T1574.010 — Hijack Execution Flow: ServicesFile Permissions Weakness](https://attack.mitre.org/techniques/T1574/010/)
- [T1574.005 — Hijack Execution Flow: Executable Installer File Permissions](https://attack.mitre.org/techniques/T1574/005/)
- [T1134.001 — Access Token Manipulation:Token Impersonation/Theft](https://attack.mitre.org/techniques/T1134/001/)
- [T1550.004 — Use Alternate Authentication Material:Web Session Cookie](https://attack.mitre.org/techniques/T1550/004/)
- [T1548 — Abuse Elevation Control Mechanism](https://attack.mitre.org/techniques/T1548/)
- [T1083 — File and Directory Discovery](https://attack.mitre.org/techniques/T1083/)
- [T1553.002 — Subvert Trust Controls:Code Signing](https://attack.mitre.org/techniques/T1553/002/)

## Referenzen

- <https://docs.liquidfiles.com/release_notes/version_4-1-x.html>
- <https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/>
- <https://gist.github.com/nikolai0x/f61a8bfcdaa244e0c46931d74d10c4ea>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2025-46093/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_