CVE-2025-62412: LibreNMS Alert Rules Cross-Site Scripting Vulnerability
Summary
CVE-2025-62412: LibreNMS alert-rules has a Cross-Site Scripting Vulnerability. Affects librenms/librenms versions < 25.10.0. Fixed in 25.10.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring tool that provides a range of features for monitoring network devices, including alerts, graphs, and device management. The software is designed for flexibility and scalability, making it suitable for both small and large networks. However, it has been found to be vulnerable to a Cross-Site Scripting (XSS) attack, specifically in its Alert Rules functionality, where user input is not properly sanitized.
Vulnerability Detail
The vulnerability arises from the Alert Rules feature in LibreNMS, where the alert rule name can be manipulated to inject malicious HTML code due to inadequate sanitization. This allows an attacker to execute arbitrary JavaScript in the context of a user's browser, potentially leading to data theft, session hijacking, or other malicious actions. The vulnerability was discovered in version 25.8.0 and can be exploited by an admin user when creating or updating alert rules.
How To Fix
Minimum fixed version
25.10.0
This is the first release that contains the fix.
composer require librenms/librenms:25.10.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using special characters in the alert rule names until the update is applied. Additionally, implementing strict input validation and sanitization on the server-side can help mitigate the risk of XSS attacks.
Conclusion
CVE-2025-62412 is a significant vulnerability in LibreNMS that can lead to serious security risks if not addressed. Users are strongly advised to update to the latest version to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the security of your applications.
See every vulnerability recorded for librenms/librenms →
FAQ
CVE-2025-62412 is a Cross-Site Scripting vulnerability found in the Alert Rules feature of LibreNMS, allowing attackers to inject malicious scripts.
If you are using LibreNMS version 25.8.0 or earlier, your installation is vulnerable. You can check your version by running 'git describe --tags' in your LibreNMS directory.
Exploitation of this vulnerability can lead to unauthorized access to sensitive information, session hijacking, and other malicious activities performed in the context of the affected user's session.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities in your software. You can check your application against known vulnerabilities using the Vulert playground without needing to sign up.
The CVSS score for CVE-2025-62412 is 3.8, indicating a low severity level for this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
