CVE-2025-34177 is a stored cross-site scripting vulnerability in the pfSense CE product by Netgate, specifically in the /suricata/suricata_flow_stream.php file. The issue arises because the policy_name parameter is not sanitized for HTML or script content before being rendered in the web interface. Exploitation requires the attacker to be authenticated with at least 'WebCfg - Services: suricata package' permissions, enabling them to inject malicious scripts that could execute in the context of the victim's browser. The vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation).

An attacker with the required authenticated permissions can inject and store malicious scripts via the policy_name parameter, which are then executed in the context of users viewing the affected page. This can lead to session hijacking, unauthorized actions, or other client-side impacts. However, the attack requires authenticated access with specific permissions, limiting the scope of exploitation.

No official patch or fix information is currently available for this vulnerability. Users should monitor Netgate's advisories for updates. Until a fix is released, restrict access to the Suricata service configuration to trusted administrators only and consider limiting permissions to reduce the risk of exploitation.