CVE-2025-58432: Privilege Escalation in ZimaOS

The impact of this vulnerability is severe. An attacker who can access localhost on a ZimaOS system can exploit this flaw to upload arbitrary files as the root user. This grants them complete control over the system, allowing them to install malware, modify system configurations, steal sensitive data, or even pivot to other systems on the network. The ability to execute code with root privileges significantly expands the attack surface and increases the potential for widespread damage. This vulnerability is particularly concerning given ZimaOS's use in managing Zima devices, which often handle sensitive data and control critical infrastructure.

1. Reserved2025-09-01
2. Published2025-09-17
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-58432 is to upgrade ZimaOS to version 1.4.2 or later, which contains the fix for this vulnerability. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restricting access to localhost for non-essential users can help limit the potential attack surface. Implementing strict file upload validation and sanitization on the /v2_1/files/file/uploadV2 endpoint can also reduce the risk, although this is not a complete solution. Monitor system logs for suspicious file upload activity and unusual root user processes.