CVE-2025-63601: Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing…

PriorityP267critical9.9CVSS 3.1

AVNACLPRLUINSCCHIHAH

EPSS

0.54%

41.1th percentile

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
snipeitapp	snipe-it	< 8.3.3	8.3.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.