CVE-2025-14651

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14651", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2025-12-13T09:14:28.307Z", "datePublished": "2025-12-14T08:32:06.896Z", "dateUpdated": "2025-12-15T21:23:27.290Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2025-12-14T08:32:06.896Z"}, "title": "MartialBE one-hub docker-compose.yml hard-coded key", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-321", "lang": "en", "description": "Use of Hard-coded Cryptographic Key"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-320", "lang": "en", "description": "Key Management Error"}]}], "affected": [{"vendor": "MartialBE", "product": "one-hub", "versions": [{"version": "0.14.0", "status": "affected"}, {"version": "0.14.1", "status": "affected"}, {"version": "0.14.2", "status": "affected"}, {"version": "0.14.3", "status": "affected"}, {"version": "0.14.4", "status": "affected"}, {"version": "0.14.5", "status": "affected"}, {"version": "0.14.6", "status": "affected"}, {"version": "0.14.7", "status": "affected"}, {"version": "0.14.8", "status": "affected"}, {"version": "0.14.9", "status": "affected"}, {"version": "0.14.10", "status": "affected"}, {"version": "0.14.11", "status": "affected"}, {"version": "0.14.12", "status": "affected"}, {"version": "0.14.13", "status": "affected"}, {"version": "0.14.14", "status": "affected"}, {"version": "0.14.15", "status": "affected"}, {"version": "0.14.16", "status": "affected"}, {"version": "0.14.17", "status": "affected"}, {"version": "0.14.18", "status": "affected"}, {"version": "0.14.19", "status": "affected"}, {"version": "0.14.20", "status": "affected"}, {"version": "0.14.21", "status": "affected"}, {"version": "0.14.22", "status": "affected"}, {"version": "0.14.23", "status": "affected"}, {"version": "0.14.24", "status": "affected"}, {"version": "0.14.25", "status": "affected"}, {"version": "0.14.26", "status": "affected"}, {"version": "0.14.27", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in MartialBE one-hub up to 0.14.27. This vulnerability affects unknown code of the file docker-compose.yml. The manipulation of the argument SESSION_SECRET leads to use of hard-coded cryptographic key\r . The attack may be initiated remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The code maintainer recommends (translated from Chinese): \"The default docker-compose example file is not recommended for production use. If you intend to use it in production, please carefully check and modify every configuration and environment variable yourself!\""}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.7, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.6, "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:W/RC:C"}}], "timeline": [{"time": "2025-12-13T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2025-12-13T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2025-12-13T10:20:22.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "28Hus (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.336384", "name": "VDB-336384 | MartialBE one-hub docker-compose.yml hard-coded key", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.336384", "name": "VDB-336384 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.710249", "name": "Submit #710249 | https://github.com/MartialBE https://github.com/MartialBE/one-hub \u2264 v0.14.27 Authentication Bypass by Primary Weakness", "tags": ["third-party-advisory"]}, {"url": "https://github.com/MartialBE/one-hub/issues/872", "tags": ["issue-tracking"]}, {"url": "https://github.com/MartialBE/one-hub/issues/872#issuecomment-3616033169", "tags": ["issue-tracking"]}, {"url": "https://github.com/MartialBE/one-hub/blob/main/docker-compose.yml#L15C24-L15C38", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-15T21:23:07.157667Z", "id": "CVE-2025-14651", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-15T21:23:27.290Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-14651", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-15T21:23:07.157667Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-15T21:23:22.120Z"}}], "cna": {"title": "MartialBE one-hub docker-compose.yml hard-coded key", "credits": [{"lang": "en", "type": "reporter", "value": "28Hus (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.6, "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:W/RC:C"}}], "affected": [{"vendor": "MartialBE", "product": "one-hub", "versions": [{"status": "affected", "version": "0.14.0"}, {"status": "affected", "version": "0.14.1"}, {"status": "affected", "version": "0.14.2"}, {"status": "affected", "version": "0.14.3"}, {"status": "affected", "version": "0.14.4"}, {"status": "affected", "version": "0.14.5"}, {"status": "affected", "version": "0.14.6"}, {"status": "affected", "version": "0.14.7"}, {"status": "affected", "version": "0.14.8"}, {"status": "affected", "version": "0.14.9"}, {"status": "affected", "version": "0.14.10"}, {"status": "affected", "version": "0.14.11"}, {"status": "affected", "version": "0.14.12"}, {"status": "affected", "version": "0.14.13"}, {"status": "affected", "version": "0.14.14"}, {"status": "affected", "version": "0.14.15"}, {"status": "affected", "version": "0.14.16"}, {"status": "affected", "version": "0.14.17"}, {"status": "affected", "version": "0.14.18"}, {"status": "affected", "version": "0.14.19"}, {"status": "affected", "version": "0.14.20"}, {"status": "affected", "version": "0.14.21"}, {"status": "affected", "version": "0.14.22"}, {"status": "affected", "version": "0.14.23"}, {"status": "affected", "version": "0.14.24"}, {"status": "affected", "version": "0.14.25"}, {"status": "affected", "version": "0.14.26"}, {"status": "affected", "version": "0.14.27"}]}], "timeline": [{"lang": "en", "time": "2025-12-13T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2025-12-13T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2025-12-13T10:20:22.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.336384", "name": "VDB-336384 | MartialBE one-hub docker-compose.yml hard-coded key", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.336384", "name": "VDB-336384 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.710249", "name": "Submit #710249 | https://github.com/MartialBE https://github.com/MartialBE/one-hub \u2264 v0.14.27 Authentication Bypass by Primary Weakness", "tags": ["third-party-advisory"]}, {"url": "https://github.com/MartialBE/one-hub/issues/872", "tags": ["issue-tracking"]}, {"url": "https://github.com/MartialBE/one-hub/issues/872#issuecomment-3616033169", "tags": ["issue-tracking"]}, {"url": "https://github.com/MartialBE/one-hub/blob/main/docker-compose.yml#L15C24-L15C38", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in MartialBE one-hub up to 0.14.27. This vulnerability affects unknown code of the file docker-compose.yml. The manipulation of the argument SESSION_SECRET leads to use of hard-coded cryptographic key\r . The attack may be initiated remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The code maintainer recommends (translated from Chinese): \"The default docker-compose example file is not recommended for production use. If you intend to use it in production, please carefully check and modify every configuration and environment variable yourself!\""}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-321", "description": "Use of Hard-coded Cryptographic Key"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-320", "description": "Key Management Error"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2025-12-14T08:32:06.896Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14651", "state": "PUBLISHED", "dateUpdated": "2025-12-15T21:23:27.290Z", "dateReserved": "2025-12-13T09:14:28.307Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2025-12-14T08:32:06.896Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "one-hub", "vendor": "MartialBE", "versions": [{"status": "affected", "version": "0.14.0"}, {"status": "affected", "version": "0.14.1"}, {"status": "affected", "version": "0.14.2"}, {"status": "affected", "version": "0.14.3"}, {"status": "affected", "version": "0.14.4"}, {"status": "affected", "version": "0.14.5"}, {"status": "affected", "version": "0.14.6"}, {"status": "affected", "version": "0.14.7"}, {"status": "affected", "version": "0.14.8"}, {"status": "affected", "version": "0.14.9"}, {"status": "affected", "version": "0.14.10"}, {"status": "affected", "version": "0.14.11"}, {"status": "affected", "version": "0.14.12"}, {"status": "affected", "version": "0.14.13"}, {"status": "affected", "version": "0.14.14"}, {"status": "affected", "version": "0.14.15"}, {"status": "affected", "version": "0.14.16"}, {"status": "affected", "version": "0.14.17"}, {"status": "affected", "version": "0.14.18"}, {"status": "affected", "version": "0.14.19"}, {"status": "affected", "version": "0.14.20"}, {"status": "affected", "version": "0.14.21"}, {"status": "affected", "version": "0.14.22"}, {"status": "affected", "version": "0.14.23"}, {"status": "affected", "version": "0.14.24"}, {"status": "affected", "version": "0.14.25"}, {"status": "affected", "version": "0.14.26"}, {"status": "affected", "version": "0.14.27"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in MartialBE one-hub up to 0.14.27. This vulnerability affects unknown code of the file docker-compose.yml. The manipulation of the argument SESSION_SECRET leads to use of hard-coded cryptographic key\r . The attack may be initiated remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The code maintainer recommends (translated from Chinese): \"The default docker-compose example file is not recommended for production use. If you intend to use it in production, please carefully check and modify every configuration and environment variable yourself!\""}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad en MartialBE one-hub hasta la versi\u00f3n 0.14.27. Esta vulnerabilidad afecta a c\u00f3digo desconocido del archivo docker-compose.yml. La manipulaci\u00f3n del argumento SESSION_SECRET lleva al uso de una clave criptogr\u00e1fica codificada de forma r\u00edgida. El ataque puede ser iniciado de forma remota. La complejidad de un ataque es bastante alta. Se afirma que la explotabilidad es dif\u00edcil. El exploit ha sido revelado al p\u00fablico y puede ser utilizado. Se recomienda cambiar los ajustes de configuraci\u00f3n. El mantenedor del c\u00f3digo recomienda (traducido del chino): 'El archivo de ejemplo docker-compose predeterminado no se recomienda para uso en producci\u00f3n. Si tiene la intenci\u00f3n de usarlo en producci\u00f3n, por favor, revise y modifique cuidadosamente cada configuraci\u00f3n y variable de entorno usted mismo!'"}], "id": "CVE-2025-14651", "lastModified": "2026-10-07T19:10:00.160", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14651", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-15T21:23:07.157667Z", "version": "2.0.3"}}]}, "published": "2025-12-14T09:15:39.523", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/MartialBE/one-hub/blob/main/docker-compose.yml#L15C24-L15C38"}, {"source": "cna@vuldb.com", "url": "https://github.com/MartialBE/one-hub/issues/872"}, {"source": "cna@vuldb.com", "url": "https://github.com/MartialBE/one-hub/issues/872#issuecomment-3616033169"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.336384"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.336384"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.710249"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-320"}, {"lang": "en", "value": "CWE-321"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"created": "2025-12-15T14:06:06.262655+00:00", "updated": "2025-12-15T14:06:06.262687+00:00", "vendors": ["martialbe", "martialbe$PRODUCT$one-hub"]}