CVE-2025-59689

Published Sep 19, 2025

Last updated a month ago

Libraesva Email Security Gateway

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-59689 is a command injection vulnerability affecting Libraesva Email Security Gateway (ESG) versions 4.5 through 5.5.x before 5.5.7. It stems from improper sanitization when the software removes active code from files within certain compressed archive formats. Attackers can exploit this vulnerability by sending emails containing specially crafted compressed attachments. The payload files are designed to manipulate the application's sanitization logic, allowing the execution of arbitrary shell commands under a non-privileged user account. Fixes have been released for ESG versions 5.0, 5.1, 5.2, 5.4, and 5.5.

Description: Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.
Source: cve@mitre.org
NVD status: Analyzed
Products: email_security_gateway

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.1
Impact score: 2.7
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity: MEDIUM

Known exploits

Data from CISA

Vulnerability name: Libraesva Email Security Gateway Command Injection Vulnerability
Exploit added on: Sep 29, 2025
Exploit action due: Oct 20, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

cve@mitre.org: CWE-77

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7388039-AE70-47F1-A389-EF05FCB34E61",
            "versionEndExcluding": "5.0.31",
            "versionStartIncluding": "4.5"
          },
          {
            "criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A280A808-E1F6-4B0A-B44F-47E5C9152B36",
            "versionEndExcluding": "5.1.20",
            "versionStartIncluding": "5.1.0"
          },
          {
            "criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62A71B25-7262-43CC-94E8-C92CC5932D86",
            "versionEndExcluding": "5.2.31",
            "versionStartIncluding": "5.2.0"
          },
          {
            "criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EDC45835-D39B-47A1-BE61-42CD7ACD6988",
            "versionEndExcluding": "5.3.16",
            "versionStartIncluding": "5.3.0"
          },
          {
            "criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C2D53E14-0C5F-4DE0-8785-F59A85107D9C",
            "versionEndExcluding": "5.4.8",
            "versionStartIncluding": "5.4.0"
          },
          {
            "criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7CF82183-A726-4FEE-95FA-4062C5F7FEEB",
            "versionEndExcluding": "5.5.7",
            "versionStartIncluding": "5.5.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.