Web AI Firewall Utility Anubis Vulnerability Exposes Users to Code Execution Risks
CVE-2025-54414

5.1MEDIUM

Key Information:

Vendor

Techarohq

Status
Anubis
Vendor
CVE Published:
26 July 2025

What is CVE-2025-54414?

The Anubis Web AI Firewall Utility, designed to safeguard user connections from scraper bots, contains a vulnerability in versions prior to 1.21.3. This flaw allows attackers to craft malicious pass-challenge pages, which can execute arbitrary JavaScript code in the context of the user’s session. Such attacks can compromise sensitive information and disrupt normal function. A workaround involves blocking specific requests to the pass-challenge route with certain parameters. Users are advised to upgrade to version 1.21.3, where this issue has been addressed.

Affected Version(s)

anubis < 1.21.3

References

https://github.com/TecharoHQ/anubis/security/advisories/G...
x_refsource_CONFIRM
https://github.com/TecharoHQ/anubis/pull/904
x_refsource_MISC
https://github.com/TecharoHQ/anubis/releases/tag/v1.21.3
x_refsource_MISC

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54414 : Web AI Firewall Utility Anubis Vulnerability Exposes Users to Code Execution Risks