CVE-2025-67736

High

CVSS 7.2

Description

The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk. Versions prior to 16.0.5 and 17.0.5 are vulnerable to SQL injection by authenticated users with administrator access. Authenticated users with administrative access to the Administrator Control Panel (ACP) can leverage this SQL injection vulnerability to extract sensitive information from the database and execute code on the system as the `asterisk` user with chained elevation to `root` privileges. Users should upgrade to version 16.0.5 or 17.0.5 to receive a fix.

CVSS Score

7.2/ 10

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness Classification (CWE)

CWE-89SQL InjectionMITRE

References (2)

https://github.com/FreePBX/security-reporting/security/advisories/GHSA-632c-49p9-x7cwsecurity-advisories@github.com https://www.freepbx.org/watch-what-we-do-with-security-fixes-%f0%9f%91%80security-advisories@github.com

Risk Assessment

STANDARD

No elevated risk factors detected.

Details

Severity: High
CVSS: 7.2
CWE: CWE-89
CISA KEV: No
Articles: 1

Timeline

Published

Dec 16, 2025

External Links

NVD (NIST)CVE Details MITRE CVE