OS Command Injection Vulnerability in Centreon Web Application

CVE-2025-5945

What is CVE-2025-5945?

An OS Command Injection vulnerability in the Centreon web application’s backup configuration modules poses significant security risks. This flaw allows remote attackers to execute arbitrary commands on the server by exploiting improper neutralization of special elements during command processing. Users of Centreon cloud version 25.03 and previous versions before 24.10.9, 24.04.15, and 23.10.24 are particularly vulnerable. Immediate action is recommended to secure affected systems and mitigate potential exploitation risks.

References