Listen to this Post
How CVE-2025-64066 Works
The vulnerability exists in the `/api/v2/user/register` REST endpoint of Primakon Pi Portal version 1.0.18. This endpoint is intended for internal user provisioning, assuming all authentication is handled by an external Identity Provider (IdP). The flaw is the complete absence of authorization checks on this API endpoint. An unauthenticated attacker can send a simple HTTP POST request directly to this endpoint. The application processes the request without validating if the requester has administrative or any privileges, allowing the creation of new user accounts directly within the application’s local database. This fundamentally bypasses the intended security model. Furthermore, by manipulating request parameters, an attacker can probe for existing usernames, as the endpoint may return different error messages for already registered users, enabling enumeration. A newly created account can then be used to chain with other vulnerabilities, such as those requiring low-level authenticated access, leading to full privilege escalation and complete system compromise.
DailyCVE Form
Platform: Primakon Pi Portal
Version: 1.0.18
Vulnerability: Broken Access Control
Severity: Critical
Date: 2025-11-25
Prediction: 2025-12-15
What Undercode Say:
curl -X POST http://target/api/v2/user/register -H "Content-Type: application/json" -d '{"username":"attacker1","email":"[email protected]","password":"P@ssw0rd"}'
for user in $(cat wordlist.txt); do echo -n "$user: "; curl -s -o /dev/null -w "%{http_code}" http://target/api/v2/user/register -H "Content-Type: application/json" -d "{\"username\":\"$user\"}"; echo; done
How Exploit:
1. Identify target running Pi Portal.
2. Craft POST request to `/api/v2/user/register`.
3. Send JSON with username/credentials.
4. Use new account for login.
5. Chain with other bugs.
Protection from this CVE
1. Disable vulnerable endpoint.
2. Implement strict authorization middleware.
3. Enforce IdP-only registration.
4. Apply vendor patch.
5. Use network access controls.
Impact:
Unauthenticated account creation
Privilege escalation vector
System compromise
User enumeration
Security model bypass
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
