TI-2025-41424 Aliases CVE-2025-67728

Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)

MEDIUM 50CWE-77Published 2025-12-12 · Updated 2025-12-12

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-77.

Summary

Fireshare facilitates self-hosted media and link sharing. Versions 1.2.30 and below allow an authenticated user, or unauthenticated user if the Public Uploads setting is enabled, to craft a malicious filename when uploading a video file. The malicious filename is then concatenated directly into a shell command, which can be used for uploading files to arbitrary directories via path traversal, or executing system commands for Remote Code Execution (RCE). This issue is fixed in version 1.3.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00686 52nd percentileScored 2026-11-07

Fix Fixed fireshare (ShaneIsrael): 1.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ShaneIsrael	fireshare	before 1.3.0	1.3.0	Patch available	CNA

fireshare VendorShaneIsrael Affected before 1.3.0 Fixed in 1.3.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:shaneisrael:fireshare::::::::	before 1.3.0	Vulnerable	ShaneIsrael

cpe:2.3:a:shaneisrael:fireshare:*:*:*:*:*:*:*:* Versions before 1.3.0 Vulnerable ·ShaneIsrael

Remediation

Fix · CNA fireshare (ShaneIsrael) Fixed in 1.3.0

Timeline

2026-10-02 Threatist record created from CVE-2025-67728

References

Patch 1

https://github.com/ShaneIsrael/fireshare/commit/157386c85f6683f89192dae52115069b435b6d34

Advisory 1

https://github.com/ShaneIsrael/fireshare/security/advisories/GHSA-c4f5-g622-q72m

TI-2026-26989 Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public CVSS 3.1CRITICAL 9.1
TI-2026-26026 Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked` CVSS 3.1HIGH 8.1
TI-2025-35020 FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the… CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences