Critical · published December 10, 2025
🚨 An arbitrary Authorization header can grant full access to user sessions in FreePBX Endpoint Manager — it’s like letting anyone walk into a party by just saying "I know the host!" 🔥 Think of it like a restaurant where anyone can claim to be a VIP just by saying they have a reservation, bypassing the host completely. Without proper checks, this allows unauthorized individuals to take all the prime seats! This vulnerability means attackers could easily impersonate valid users, potentially accessing sensitive telephony information or altering configurations. It's a recipe for chaos in your communications system, leading to possible data breaches or service disruptions.
Think of it like a restaurant where anyone can claim to be a VIP just by saying they have a reservation, bypassing the host completely. Without proper checks, this allows unauthorized individuals to take all the prime seats! The flaw allows session hijacking by providing an Authorization header with any value, thus bypassing authentication checks when the authentication type is set to "webserver." This fundamentally undermines user verification.
This vulnerability means attackers could easily impersonate valid users, potentially accessing sensitive telephony information or altering configurations. It's a recipe for chaos in your communications system, leading to possible data breaches or service disruptions. Upgrade to FreePBX Endpoint Manager version 16.0.44 or 17.0.23 immediately to patch this vulnerability. Additionally, review your authentication settings to ensure they are configured securely and consider implementing stricter validation. Don't leave your system hanging out to dry! This is fixable! Follow these steps, and you'll lock down your FreePBX system in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| sangoma/freepbx | < 16.0.44 | 16.0.44 |
| sangoma/freepbx | ≥ 17.0.1, < 17.0.23 | 17.0.23 |