ajenti API privileges management

published 2022-06-09 4 y ago modified 2026-06-17 4 mo ago also EUVD-2019-11511

cvss: 6.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 5.5%; EPSS 5.5% chance of exploitation in 30 days, percentile 92%
public exploits: 1; Metasploit

A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.32 is able to address this issue. The name of the patch is 7aa146b724e0e20cfee2c71ca78fafbf53a8767c. It is recommended to upgrade the affected component.

Patch / fix

links 3

Timeline

2019-10-14 First public exploit (Metasploit exploit/unix/webapp/ajenti_auth_username_cmd_injection)
2022-06-09 Published

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 18 mo ago (2025-04-14)

Exploit prediction

5.48% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/unix/webapp/ajenti_auth_username_cmd_injection Ajenti auth username Command Injection metasploit exploit, excellent rank, 2019-10-14
exploit-db.com https://www.exploit-db.com/exploits/47497 referenced PoC, tagged "exploit" by a source, unverified
vuldb.com https://vuldb.com/?id.143950 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NVD	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	6.5	AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

unspecified ajenti

Classification

Weakness

CWE-269 Improper Privilege Management
CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

github.com /ajenti/ajenti/commit/7aa146b724e0e20cfee2c71ca78fafbf53a8767c
patch, third-party-advisory
exploit-db.com /exploits/47497
exploit, patch, third-party-advisory, vdb-entry
vuldb.com /?id.143950
exploit, patch, third-party-advisory

Sources

CVE List CVE-2019-25066
NVD CVE-2019-25066

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary