EUVD-2026-45180
GHSA-66cj-jqwq-x892
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
XXE reached through the authenticated Proxmox management API implies PR:L; impact is chiefly arbitrary file disclosure (C:H) with limited DoS (A:L) and no direct integrity change (I:N).
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.
AnalysisAI
XML External Entity injection in the libpve-storage-perl library (the storage-management Perl backend of Proxmox VE) affects builds identified as libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7, per MITRE. An attacker able to submit crafted XML to an affected storage-handling code path can force the parser to resolve external entities, enabling arbitrary local file disclosure and potential SSRF or denial of service. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV; EPSS was not provided.
Technical ContextAI
libpve-storage-perl is a core Perl module of Proxmox Virtual Environment (PVE) responsible for defining, managing, and communicating with storage backends (LVM, ZFS, NFS, iSCSI, Ceph, directory, etc.) used by the PVE web UI and API. The root cause is CWE-611 (Improper Restriction of XML External Entity Reference): an XML parser processes untrusted input without disabling DOCTYPE/external-entity resolution, so a crafted document containing a <!DOCTYPE ... SYSTEM 'file:///...'> declaration is expanded by the parser. In Perl this class of bug typically arises from XML::LibXML or similar parsers instantiated with entity expansion / network access enabled. The supplied CPE string is a placeholder (cpe:2.3:a:n/a:n/a:*) and does not identify the product, so exact affected-component identification relies on the MITRE description text rather than structured CPE data.
RemediationAI
No exact vendor-released fixed version is present in the supplied data; consult the Proxmox VE security advisory thread (https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-849970) and upgrade libpve-storage-perl to the patched package once the maintainers publish it via the standard Proxmox APT repositories (Patch available per vendor advisory; released patched version not independently confirmed from this data). As compensating controls until patched: restrict access to the Proxmox web UI and API (default TCP 8006) to trusted management networks or a VPN so untrusted parties cannot reach the XML-handling endpoints, tighten firewall rules and Proxmox user roles so only necessary operators can invoke storage-configuration operations, and monitor for outbound connections or unexpected file access originating from the pvedaemon/pveproxy processes (a sign of XXE-driven SSRF or file exfiltration). The trade-off of network restriction is reduced remote manageability; if you can rebuild the affected code path, ensuring the XML parser is instantiated with external-entity and DTD loading disabled (no_network/expand_entities off) neutralizes the flaw without functional loss.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Share
External POC / Exploit Code
Leaving vuln.today