CVE-2025-29419: n/a
Description
CTFd version 3.7.6 is vulnerable to a man-in-the-middle (MitM) attack, which can lead to high confidentiality impact and limited integrity impact without affecting availability. The vulnerability is identified as CWE-300 and has a CVSS v3.1 score of 7.1, indicating high severity. No patch or official remediation guidance has been provided yet. There are no known exploits in the wild at this time.
CVSS v3.1
Score 7.1high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-29419 describes a vulnerability in CTFd v3.7.6 that allows an attacker to perform a man-in-the-middle attack. This vulnerability affects confidentiality significantly (high impact), with limited impact on integrity and no impact on availability. The attack vector is adjacent network (AV:A), requiring no privileges or user interaction. The vulnerability is classified under CWE-300 (channel accessible by non-endpoint). No patch or remediation level has been disclosed by the vendor as of the publication date.
Potential Impact
Successful exploitation can lead to an attacker intercepting and potentially reading sensitive data transmitted between clients and the CTFd server, compromising confidentiality. Integrity impact is limited, and availability is not affected. The attack requires network adjacency but no privileges or user interaction.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider using network-level protections such as VPNs or secure tunnels to mitigate man-in-the-middle risks. Monitor vendor channels for updates and apply official patches once released.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2025-03-11T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6a8f2b77acd9273b49385c91
Added to database: 08/26/2026, 18:07:51 UTC
Last enriched: 09/07/2026, 15:34:14 UTC
Last updated: 10/09/2026, 18:48:14 UTC
Views: 42
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.