CVE-2025-29331 An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading u...
CriticalCVSS 9.8
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mhsanaei github.com/mhsanaei/3x-ui/v3 | < 2.5.3 | 2.5.3 |
References
- www.digilol.net third-party-advisory
- github.com exploit issue-tracking patch