CVE-2025-0103

CVE-2025-0103 is a high-severity SQL injection vulnerability affecting Palo Alto Networks Expedition, a retired migration tool. An authenticated attacker can exploit this flaw to access sensitive database contents, including password hashes, usernames, device configurations, and API keys, as well as create and read arbitrary files on the system. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low privileges and no user interaction, leading to high impacts on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.