Back Cve.Tools

CVE-2018-25332 (CRITICAL)

Cve.Tools • May 17, 2026

GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality. Attackers can brute-force the Blowfish encryption key, upload a malicious JAR plugin via the git-lfs endpoint, and execute system commands through an exposed exploit endpoint.

Click technique nodes to view MITRE ATT&CK details. Scroll to zoom, drag to pan.

Get the full picture for CVE-2018-25332 and every CVE in our database. Create a free account — no credit card required.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Vulnerability in GitBucket Disclosed A critical vulnerability (CVE-2018-25332) has been identified in GitBucket version 4.23.1, allowing unauthenticated remote code execution. Attackers can exploit weak secret token generation and insecure file upload functionality to execute arbitrary commands. The attack vector involves brute-forcing the Blowfish encryption key and uploading malicious JAR plugins via the git-lfs endpoint. This vulnerability has been validated by three independent sources prior to publication. Organizations using GitBucket are urged to assess their systems for this vulnerability. The flaw was published on May 17, 2026, and poses a significant risk to affected users. 2 sources 77

Extracted Entities

CVE-2018-25332 (CRITICAL)

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (3)

Platforms (1)

Tools (1)