by Kastro
Paper/Archive/CVE-2025-0105

CVE-2025-0105

Palo Alto Networks Cloud NGFW — Expedition: Arbitrary File Deletion Vulnerability

EPSS 13%CVSS 9.1
critical.is priorityof 100
47
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 96.4.964 × 2019.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.

Affected

ProductAffectedFixed inSource
Cloud NGFWsee advisoryAllCNA
Expedition1 – < 1.2.1011.2.101CNA
Panoramasee advisoryAllCNA
PAN-OSsee advisoryAllCNA
Prisma Accesssee advisoryAllCNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
palo_alto (CNA)6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Green
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisorysecurity.paloaltonetworks.com/PAN-SA-2025-0001