CVE-2025-54306

CVE-2025-54306 describes a remote code execution vulnerability in Thermo Fisher Torrent Suite Django application version 5.18.1. This flaw arises from insufficient input validation in the network configuration functionality, allowing authenticated administrators to inject malicious data into environment variables via Bash scripts (TSsetnoproxy and TSsetproxy). The vulnerability has a CVSS score of 7.2 (High), indicating that an attacker with high privileges can achieve full compromise of confidentiality, integrity, and availability over the network with low attack complexity. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.