{"id":"CVE-2025-66398","sourceIdentifier":"security-advisories@github.com","published":"2026-01-01T18:15:40.550","lastModified":"2026-10-07T11:10:00.153","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`) of the server via the `/skServer/validateBackup` endpoint. This allows the attacker to hijack the administrator's \"Restore\" functionality to overwrite critical server configuration files (e.g., `security.json`, `package.json`), leading to account takeover and Remote Code Execution (RCE). Version 2.19.0 patches this vulnerability."},{"lang":"es","value":"Signal K Server es una aplicación de servidor que se ejecuta en un concentrador central en un barco. Antes de la versión 2.19.0, un atacante no autenticado puede contaminar el estado interno ('restoreFilePath') del servidor a través del endpoint '/skServer/validateBackup'. Esto permite al atacante secuestrar la funcionalidad 'Restaurar' del administrador para sobrescribir archivos de configuración críticos del servidor (por ejemplo, 'security.json', 'package.json'), lo que lleva a la toma de control de la cuenta y a la Ejecución Remota de Código (RCE). La versión 2.19.0 corrige esta vulnerabilidad."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"SignalK","product":"signalk-server","versions":[{"version":"< 2.19.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-05T21:00:27.609924Z","id":"CVE-2025-66398","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"},{"lang":"en","value":"CWE-913"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:signalk:signal_k_server:*:*:*:*:*:*:*:*","versionEndExcluding":"2.19.0","matchCriteriaId":"102A9593-CCDC-4532-8201-E67EEFC665E0"}]}]}],"references":[{"url":"https://github.com/SignalK/signalk-server/releases/tag/v2.19.0","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/SignalK/signalk-server/security/advisories/GHSA-w3x5-7c4c-66p9","source":"security-advisories@github.com","tags":["Exploit","Vendor Advisory"]}]}