Remote Code Execution Vulnerability in sysPass by Nuxsmin

CVE-2026-63725

What is CVE-2026-63725?

The vulnerability in sysPass's FileBackupService allows attackers to exploit improperly handled backup paths, enabling arbitrary command execution. This occurs through the concatenation of user-controlled input into a shell command without proper sanitation. An attacker, having administrative access or an API token, can manipulate the backup path to include harmful shell metacharacters. This flaw poses a significant risk as it allows access to sensitive credentials stored within sysPass, potentially leading to unauthorized access to various internal systems and the creation of persistent backdoors.

References