CVE-2025-0107

CVE-2025-0107 is a critical OS command injection vulnerability in Palo Alto Networks Expedition, allowing unauthenticated attackers to execute arbitrary commands as the www-data user. This can lead to the disclosure of sensitive data including usernames, cleartext passwords, device configurations, and API keys for firewalls running PAN-OS. With a CVSS score of 9.8 (Critical) and an EPSS score indicating high exploitability, the vulnerability poses a significant risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not yet in CISA's KEV catalog, Nuclei templates for exploitation exist, and the vulnerability has garnered significant community discussion, suggesting a high likelihood of future exploitation.