CVE-2025-71457

Summary

An authentication bypass in vtenext 25.02 before 25.02.1 allows unauthenticated attackers to change any user's password—including administrators—by sending a request to hub/rpwd.php without token verification, enabling full account takeover.

Exploitability

Exploitation is straightforward for an attacker who knows a valid username; no authentication or prior access is required.

Blast radius

Successful exploitation grants full administrative access to accounts lacking two-factor authentication, risking complete system compromise and data breach.

Detection

Defenders should monitor for repeated POST requests to /hub/rpwd.php with action=change_password from unauthenticated sessions, especially targeting known usernames; such requests lack valid session tokens and may appear in access logs with HTTP 200 responses despite missing authentication.

Prioritized remediation

Upgrade to vtenext version 25.02.1 or later, which includes token verification for password change requests.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.