Vulnerability · Published Dec 26, 2025 · Assigned by GitHub_M

CVE-2025-68932FreshRSS has weak cryptographic randomness in remember-me token and nonce generation

Low 2.9

In plain English

A low-severity security flaw in FreshRSS from FreshRSS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).

Severity (CVSS 4.0)2.9Low

Exploit odds (30 days)0.6%top 53.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking. The remember-me tokens provide permanent authentication and are the sole credential for "keep me logged in" functionality. This issue has been patched in version 1.28.0.

Affected products (as reported)

Vendor	Product	Versions
FreshRSS	FreshRSS	< 1.28.0

Weakness: CWE-338 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

References

https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-j9wc-gwc6-p786 x_refsource_CONFIRM
https://github.com/FreshRSS/FreshRSS/pull/8061 x_refsource_MISC
https://github.com/FreshRSS/FreshRSS/commit/57e1a375cbd2db9741ff19167813344f8eff5772 x_refsource_MISC