SQL Injection Vulnerability in FreePBX tts Module
CVE-2025-67736

8.6HIGH

Key Information:

Vendor

Freepbx

Status
Tts
Vendor
CVE Published:
16 December 2025

What is CVE-2025-67736?

The tts (Text to Speech) module for FreePBX contains an SQL injection vulnerability that can be exploited by authenticated users with administrative access. This flaw allows administrators to manipulate SQL queries, potentially leading to unauthorized data extraction from the database and code execution on the server as the asterisk user. In a worst-case scenario, attackers could attain elevated privileges, further compromising system integrity. To mitigate the risk, it is essential for users to upgrade to at least version 16.0.5 or 17.0.5.

Affected Version(s)

tts < 16.0.5 < 16.0.5

tts >= 17.0.0, < 17.0.5 < 17.0.0, 17.0.5

References

https://github.com/FreePBX/security-reporting/security/ad...
x_refsource_CONFIRM
https://www.freepbx.org/watch-what-we-do-with-security-fi...
x_refsource_MISC

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.