Description
Maltrail是一款开源的恶意流量检测系统。Maltrail存在远程命令执行漏洞，远程攻击者可以通过向 /login 端点发送 POST 请求时的 username 参数执行任意操作系统命令。
Maltrail /login 代码执行漏洞（CVE-2025-34073）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-34073
https://github.com/advisories/GHSA-6655-8f3g-xp52
https://vulncheck.com/advisories/stamparm-maltrail-rce
https://huntr.com/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/maltrail_rce.rb
https://access.redhat.com/security/cve/cve-2025-34073
https://www.sentinelone.com/vulnerability-database/cve-2025-34073/
https://cve.yack.one/cve/CVE-2025-34073