Foomuuri firewall has critical vulnerabilities

Vulnerabilities in the Foomuuri firewall tool allow local attackers to bypass security and manipulate rules, creating a privilege escalation risk.

Security researchers have identified two significant vulnerabilities in Foomuuri, a firewall management tool. The flaws reside in the tool's D-Bus service, a system for inter-process communication. The first vulnerability (CVE-2025-67603) involves improper authorization enforcement, allowing an attacker to send commands without the required permissions. The second issue stems from the D-Bus service failing to properly validate interface names. Combined, these weaknesses permit a local attacker with low-level access to manipulate the system's firewall configuration, a task that should be restricted to privileged users.

The primary impact of these vulnerabilities is local privilege escalation. An unprivileged user on a system running Foomuuri could exploit these flaws to gain control over the firewall. This would allow them to open or close ports, redirect traffic, or disable security protections entirely, potentially exposing sensitive services or creating a pathway for further attacks. This poses a serious risk for any organization using Foomuuri, especially in shared environments like development servers or multi-tenant systems. IT administrators and security teams must address these issues to prevent unauthorized modification of their network security posture.

The vulnerabilities allow a low-privilege local user to gain control over a system's firewall, a critical security component. This can lead to unauthorized network access, data exposure, and further system compromise, undermining the integrity of the server's defenses.

A compromised firewall can expose internal services to the internet, lead to data breaches, and disrupt operations. For businesses relying on Foomuuri for server security, this vulnerability increases the risk of a successful cyberattack originating from a compromised low-level account, potentially leading to significant financial and reputational damage.