An authenticated command injection vulnerability in OPNsense versions prior to 25.1.8 allows an attacker with administrative privileges to achieve full remote code execution and system compromise.

This is an OS command injection flaw (CWE-78) located in the Bridge Interface Edit endpoint (interfaces_bridge_edit.php). The span POST parameter is improperly sanitized, allowing an authenticated administrator to inject arbitrary shell commands that execute with root-level privileges.

Successful exploitation of this vulnerability permits an attacker to execute arbitrary code with root privileges on the OPNsense firewall. This leads to complete system compromise, potential interception of network traffic, and a significant risk of lateral movement into protected internal network segments. The CVSS score of 8.8 reflects the high severity of this flaw, as it allows an attacker to gain full control over a critical security appliance.

Immediate Action: Administrators must update their OPNsense installation to version 25.1.8 or later immediately to apply the necessary input sanitization patches.

Proactive Monitoring: Review system logs and audit trails for unauthorized modifications to interface configurations or suspicious process spawns originating from the web server user.

Compensating Controls: Ensure that access to the OPNsense administrative web interface is restricted to trusted management networks or managed via multi-factor authentication to prevent unauthorized account access.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the researcher write-up linked in the references.

Given the critical nature of firewall appliances and the potential for total system compromise, this vulnerability poses a severe risk to organizational network integrity. It is imperative that administrators prioritize the update to version 25.1.8 to neutralize the injection vector. Failure to patch leaves the internal network exposed to any actor capable of compromising an administrative account.