What’s Vulnerable › Vulnerabilities

CVE-2025-54955

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-03 · updated 2026-06-17
• Weakness: CWE-362

Description

OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.

Affected products

• OpenNebula: from Enterprise Edition before 6.10.3; from Community Edition before 7.0.0 — fixed in 6.10.3, 7.0.0

How to fix

Upgrade to a fixed version: OpenNebula 6.10.3, 7.0.0. Check the vendor advisory for mitigations.

References

• https://docs.opennebula.io/6.10/intro_release_notes/release_notes_enterprise/resolved_issues_6103.html
• https://github.com/OpenNebula/one
• https://github.com/OpenNebula/one/commit/81058d9705e7ac619d294423de28b76d88f613b6
• https://github.com/OpenNebula/one/releases/tag/release-7.0.0
• https://github.com/Stolichnayer/OpenNebula-Account-Takeover
• https://github.com/Stolichnayer/OpenNebula-Account-Takeover

Get alerted when CVE-2025-54955 or the next vulnerability affects your stack