{"id":86840,"date":"2026-04-02T22:08:26","date_gmt":"2026-04-02T22:08:26","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-55732-critical-sql-injection-vulnerability-in-frappe-web-application-framework","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-55732-critical-sql-injection-vulnerability-in-frappe-web-application-framework\/","title":{"rendered":"CVE-2025-55732: Critical SQL Injection Vulnerability in Frappe Web Application Framework<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The vulnerability, identified as CVE-2025-55732, is a severe SQL Injection flaw that affects certain versions of the Frappe web application framework. The vulnerability allows attackers to bypass the initial patch released for CVE-2025-52895, presenting a significant security risk as it could lead to system compromise and data leakage. Therefore, it is of paramount importance for users and administrators of affected systems to apply the necessary patches or mitigation strategies immediately.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-55732
\nSeverity: High (CVSS: 7.5)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: None
\nImpact: Potential system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n