Remote Code Execution Vulnerability in Thermo Fisher Torrent Suite Software

CVE-2025-54306

What is CVE-2025-54306?

A remote code execution vulnerability exists in the network configuration functionality of the Thermo Fisher Torrent Suite application version 5.18.1. This issue arises from inadequate input validation while processing network configuration parameters via administrative endpoints. Administrators can modify the network settings, which are then handled by Bash scripts that write user-supplied data to environment variables without sufficient sanitization. If an attacker injects malicious input, the execution of certain scripts may allow arbitrary command execution. The vulnerability starts at the /admin/network endpoint, where unfiltered user input can lead to significant security risks.

References