Volerion logoVolerion
Volerion logoVolerion

GLPI Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in GLPI versions 0.85 and later. This issue allows an authenticated user to upload and execute PHP files on the GLPI server.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the server where GLPI is hosted.

Remediation

Users are advised to upgrade to GLPI version 10.0.18.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
10.0
exploitability
5.2
remediation
7.7
relevance
0.0
threat
0.1
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.