Weak Argument Quoting in Webmin Cache Manager
CVE-2025-67738

8.5HIGH

Key Information:

Vendor

Webmin

Status
Vendor
CVE Published:
11 December 2025

What is CVE-2025-67738?

An improper quoting issue in the Cache Manager feature of the Webmin Squid module allows authenticated users with specific permissions to manipulate arguments. This vulnerability could allow an attacker to execute unauthorized commands by exploiting the failure to correctly handle input arguments. Proper safeguards should be reinforced to mitigate potential risks associated with privilege escalation or unauthorized access.

Affected Version(s)

Webmin 0 < 2.600

References

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-67738 : Weak Argument Quoting in Webmin Cache Manager