CVE Vulnerabilities

CVE-2025-55322

Binding to an Unrestricted IP Address

Published: Sep 24, 2025 | Modified: Oct 01, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.

Weakness

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Affected Software

Name Vendor Start Version End Version
Omniparser Microsoft * 2.0.1 (excluding)

Extended Description

When a server binds to the address 0.0.0.0, it allows connections from every IP address on the local machine, effectively exposing the server to every possible network. This might be much broader access than intended by the developer or administrator, who might only be expecting the server to be reachable from a single interface/network.

Potential Mitigations

References