{"id":"CVE-2025-54955","aliases":["EUVD-2025-23454","GHSA-236c-586c-7q48","UBUNTU-CVE-2025-54955"],"status":"published","title":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a...","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00407,"percentile":0.35354,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2025-08-02T00:00:00Z","modified":"2026-11-06T13:51:28Z","products":[{"vendor":"opennebula","product":"opennebula"}],"references":[{"url":"https://github.com/OpenNebula/one","tags":["package","report"]},{"url":"https://github.com/Stolichnayer/OpenNebula-Account-Takeover","tags":["exploit","package","report"]},{"url":"https://docs.opennebula.io/6.10/intro_release_notes/release_notes_enterprise/resolved_issues_6103.html","tags":["web","report"]},{"url":"https://github.com/OpenNebula/one/releases/tag/release-7.0.0","tags":["web","report"]},{"url":"https://github.com/OpenNebula/one/commit/81058d9705e7ac619d294423de28b76d88f613b6","tags":["fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54955","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-236c-586c-7q48"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54955.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-54955","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-54955","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-54955","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","status":"published","published":"2025-08-02T00:00:00Z","modified":"2025-08-04T15:20:53.978Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:32:27.603809Z"}],"euvd":[{"id":"EUVD-2025-23454","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","status":"published","published":"2025-08-02T00:00:00Z","modified":"2025-08-04T15:20:53Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:01.599514Z"}],"ghsa":[{"id":"GHSA-236c-586c-7q48","title":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a...","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","status":"published","published":"2025-08-03T00:30:25Z","modified":"2025-08-03T00:30:25Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T15:03:10.193177Z"}],"nvd":[{"id":"CVE-2025-54955","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","status":"published","published":"2025-08-03T00:15:25.633Z","modified":"2026-06-17T09:40:59.42Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:11:21.71471Z"}],"osv":[{"id":"CVE-2025-54955","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","status":"published","published":"2025-08-02T00:00:00Z","modified":"2026-11-10T02:45:12.264506175Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-09T10:53:57.550641Z"},{"id":"UBUNTU-CVE-2025-54955","description":"OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.","status":"withdrawn","published":"2025-08-03T00:15:00Z","modified":"2026-11-06T13:51:28.463919413Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T14:23:50.293009Z"}]}}