CVE-2025-44163: RaspAP raspap-webgui Directory Traversal Vulnerability
Summary
CVE-2025-44163: raspap-webgui has a Directory Traversal vulnerability. Affects billz/raspap-webgui versions < 3.3.6. Fixed in 3.3.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
RaspAP is an open-source web-based application that simplifies the management of Wi-Fi access points. It provides a user-friendly interface for configuring network settings, monitoring connections, and managing network security. The package 'raspap-webgui' is widely used for creating and managing wireless networks, making it a critical tool for users seeking to enhance their network capabilities. However, version 3.3.1 of this package is vulnerable to a Directory Traversal issue, which can lead to unauthorized file access and manipulation.
Vulnerability Detail
The Directory Traversal vulnerability in RaspAP's raspap-webgui allows an authenticated attacker to exploit the 'ajax/networking/get_wgkey.php' endpoint. By sending a crafted POST request with a malicious payload in the 'entity' parameter, an attacker can traverse the directory structure and overwrite arbitrary files that are writable by the web server. This vulnerability arises from improper validation of user input and the insecure use of the 'tee' command in shell execution, potentially leading to severe security breaches.
How To Fix
Minimum fixed version
3.3.6
This is the first release that contains the fix.
composer require billz/raspap-webgui:3.3.6Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the vulnerable endpoint by implementing additional authentication checks or by disabling the affected functionality until the package is updated. However, this is not a permanent solution and should be followed up with an update.
Conclusion
The Directory Traversal vulnerability in RaspAP's raspap-webgui poses significant security risks that can be exploited by authenticated attackers. It is essential to update to the latest version to protect against potential threats. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for billz/raspap-webgui →
FAQ
A Directory Traversal vulnerability allows an attacker to access files and directories that are stored outside the web root folder, potentially leading to unauthorized access to sensitive information.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can also use the Vulert playground at Vulert Scanner to analyze your composer.lock file without any signup.
The risks include unauthorized file access, data manipulation, and potential system compromise, which can lead to further exploitation of the affected system.
Yes, it is crucial to update to the patched version as soon as possible to mitigate the risk of exploitation and protect your system from potential attacks.
If immediate updates are not possible, implement temporary workarounds such as restricting access to the vulnerable endpoint and monitoring for suspicious activity until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for billz/raspap-webgui.
