{"id":"CVE-2025-0107","title":"An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords…","summary":"An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"paloaltonetworks","product":"expedition","affected":["expedition < 1.2.101"],"patched":["expedition 1.2.101"],"published":"2025-01-11","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:30.753","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-0107","references":[{"url":"https://security.paloaltonetworks.com/PAN-SA-2025-0001","label":"psirt@paloaltonetworks.com"}],"tags":["nvd","cve.org","exploit-available","score-dispute"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2025-08-14T21:06:09.775278Z"},"scores":{"nvd":9.8,"cna":7.7},"epss":0.78416,"epssPercentile":0.99583,"exploits":{"nuclei":["CVE-2025-0107"],"checkedAt":"2026-11-05T06:38:49.870Z"},"ingestedAt":"2026-11-05T06:38:03.592Z","slug":"CVE-2025-0107","body":"## Overview\n\nAn OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.\n\n## Affected\n\n- `expedition < 1.2.101`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `expedition 1.2.101`","depth":"abyssal","depthScore":82,"depthScoreParts":{"impact":53.9,"likelihood":15.7,"exploitation":12,"ransomware":0},"changes":[]}