Improper Authorization Vulnerability in Foomuuri Product by Vendor
CVE-2025-67603

5.1MEDIUM

Key Information:

Vendor

Https://github.com/foobaroy/

Status
Foomuuri
Vendor
CVE Published:
8 January 2026

What is CVE-2025-67603?

An Improper Authorization vulnerability in Foomuuri allows unauthorized users to manipulate firewall configurations. This could lead to unauthorized access and configuration changes, affecting the security posture of systems utilizing Foomuuri versions prior to 0.31. It is essential for users of affected versions to apply updates or implement protective measures to safeguard against exploitation.

Affected Version(s)

Foomuuri ? < 0.31

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67603
https://security.opensuse.org/2026/01/07/foomuuri-lack-of...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthias Gerstner of SUSE
.