Remote Code Execution Vulnerability in Archon by Coleam00
CVE-2025-69443

6.3MEDIUM

Key Information:

Vendor

Coleam00

Status
Archon
Vendor
CVE Published:
14 May 2026

What is CVE-2025-69443?

A serious vulnerability exists in Archon version 0.1.0 by Coleam00, allowing remote code execution when a specially crafted HTML page is accessed by the victim. This flaw enables an attacker to execute arbitrary commands, manipulate user prompts, and control key UI features. Additionally, it poses a significant risk by exposing sensitive information accessible within the Archon interface, including API keys.

References

https://github.com/coleam00/Archon
https://www.ox.security/blog/archon-remote-code-execution
https://www.ox.security/blog/cve-2025-69443-archon-os-vul...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.