CVE-2025-24354

Summary

CVE-2025-24354 is a vulnerability affecting imgproxy, an image resizing and processing server. Despite having IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false, imgproxy fails to block the 0.0.0.0 address, exposing local services to potential attackers. This issue could lead to unauthorized access and potential exploitation of vulnerable systems. Users are advised to upgrade to imgproxy version 3.27.2 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.