Exploitation Summary
EIP tracks 3 public exploits for CVE-2025-69516.
PoCs published by NtGabrielGomes, SNISS, Gabriel Gomes, including Metasploit module exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2025-69516, a Server-Side Template Injection (SSTI) vulnerability in Tactical RMM. The exploit leverages Jinja2 template injection to achieve remote code execution by crafting a malicious template payload.
Description
A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the server. This occurs due to improper sanitization of the template_md parameter, enabling direct injection of Jinja2 templates. This occurs due to misuse of the generate_html() function, the user-controlled value is inserted into `env.from_string`, a function that processes Jinja2 templates arbitrarily, making an SSTI possible.
Exploits (3)
This repository contains a functional Python exploit for CVE-2025-69516, a Server-Side Template Injection (SSTI) vulnerability in Tactical RMM. The exploit leverages Jinja2 template injection to achieve remote code execution by crafting a malicious template payload.
This repository contains a functional Python exploit for CVE-2025-69516, a Server-Side Template Injection (SSTI) vulnerability in Tactical RMM. The exploit leverages Jinja2 template injection to achieve remote code execution by crafting a malicious template payload.
This Metasploit module exploits a Server-Side Template Injection (SSTI) vulnerability in Tactical RMM versions prior to 1.4.0. It authenticates with valid credentials, obtains a Knox API token, and delivers a Jinja2 SSTI payload through the template preview functionality to achieve remote code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H