CVE-2025-67728

CVE-2025-67728 is a critical vulnerability affecting Fireshare versions 1.2.30 and below, allowing remote code execution (RCE) and arbitrary file uploads. This flaw stems from improper handling of malicious filenames during video uploads, which are directly incorporated into shell commands. With a CVSS score of 9.8, it presents a severe risk as it can be exploited by unauthenticated users if public uploads are enabled, or by authenticated users otherwise, with no user interaction required. While there is no known active exploitation or public exploit code, the vulnerability has garnered community attention, indicating a potential for future exploitation.