CVE-2025-60892
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Raspberry Pi Imager是Raspberry Pi开源的一款工具软件。 Raspberry Pi Imager 1.9.6版本存在安全漏洞，该漏洞源于公钥认证设置错误地将本地id_rsa.pub密钥重新添加到Raspberry Pi的authorized_keys文件中，可能导致攻击者使用非预期密钥登录设备。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-60892
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue in Raspberry Pi Imager version 1.9.6 for Windows, affecting its OS customization feature. The imager's 'public-key authentication' setting unintentionally re-adds a user's id_rsa.pub key from their local Windows machine to the authorized_keys file on the Raspberry Pi, even after the user explicitly deletes the key from the user interface. This creates an unintended attack surface, as it could allow an attacker to use a different key than the intended one to login to the device.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Raspberry Pi Imager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Raspberry Pi Imager是Raspberry Pi开源的一款工具软件。 Raspberry Pi Imager 1.9.6版本存在安全漏洞，该漏洞源于公钥认证设置错误地将本地id_rsa.pub密钥重新添加到Raspberry Pi的authorized_keys文件中，可能导致攻击者使用非预期密钥登录设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-60892
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-60892
请登录查看更多情报信息。
Same Patch Batch · n/a · 2025-11-03 · 21 CVEs total
| CVE-2025-63446 | Water-Management-System 安全漏洞 | |
| CVE-2025-50735 | NextChat 安全漏洞 | |
| CVE-2025-63293 | FairSketch Rise Ultimate Project Manager and CRM 安全漏洞 | |
| CVE-2025-63593 | Grav CMS 安全漏洞 | |
| CVE-2025-50363 | PHPGurukul Maid Hiring Management System 安全漏洞 | |
| CVE-2025-63441 | Open Source Social Network 安全漏洞 | |
| CVE-2025-63451 | CarLux 安全漏洞 | |
| CVE-2025-63442 | Simple-User-Management-System-with-PHP-MySQL 安全漏洞 | |
| CVE-2025-63448 | Water-Management-System 安全漏洞 | |
| CVE-2025-63449 | Water-Management-System 安全漏洞 | |
| CVE-2025-29699 | NetSurf 安全漏洞 | |
| CVE-2025-63447 | Water-Management-System 安全漏洞 | |
| CVE-2025-63450 | CarLux 安全漏洞 | |
| CVE-2025-63443 | school-management-system 安全漏洞 | |
| CVE-2025-63452 | CarLux 安全漏洞 | |
| CVE-2025-63453 | CarLux 安全漏洞 | |
| CVE-2025-60785 | IceScrum 安全漏洞 | |
| CVE-2025-60503 | Ultimate Fosters UltimatePOS 安全漏洞 | |
| CVE-2024-51317 | NetSurf 安全漏洞 | |
| CVE-2025-45663 | NetSurf 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-60892
No comments yet