CVE-2025-55729

CRITICAL

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in t...

Affects 0 products across 1 vendor.

CVSS 3.110.0
EPSS0.7%
Percentile54th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-116: CWE-116
Related Attack Patterns (CAPEC)
CAPEC-81 Web Server Logs Tampering
via CWE-116
CAPEC-85 AJAX Footprinting
via CWE-116
CAPEC-73 User-Controlled Filename
via CWE-116
CAPEC-104 Cross Zone Scripting
via CWE-116

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

CVE-2025-55729 affects XWiki Remote Macros versions 1.0 to 1.26.4, allowing remote code execution due to improper escaping of the ac:type parameter in the ConfluenceLayoutSection macro, leading to XWiki syntax injection.

BSID: BS-2025-GLOBAL-297277-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-55729?
CVE-2025-55729 affects XWiki Remote Macros versions 1.0 to 1.26.4, allowing remote code execution due to improper escaping of the ac:type parameter in the ConfluenceLayoutSection macro, leading to XWiki syntax injection.
What is the CVSS score for CVE-2025-55729?
CVE-2025-55729 has CVSS 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS: 0.7%.
Is CVE-2025-55729 actively exploited?
No confirmed active exploitation of CVE-2025-55729 as of 2026-10-24.
How do I remediate CVE-2025-55729?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-55729?
CVE-2025-55729 affects Xwiki.
Vulnerability Details
CVE IDCVE-2025-55729
BSIDBS-2025-GLOBAL-297277-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published2025-09-09
Last Modified2026-10-18
ICS Relevance0%
Weakness (CWE)
CWE-116
SourceNVD
Official Description

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by injecting malicious XWiki syntax through the ac:type parameter in the ConfluenceLayoutSection macro. This can lead to remote code execution with the privileges of the user who can edit any page.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Xwiki — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 409 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash62e550b9ff6a30635e9b816ad90cfdfca2201494aef507115e6d66cc44241d8f888b4472704caa9b16758903f5d3bf7f6b4155202cbec3d643ea7610582d698a
Related CVEs affecting Xwiki
CVE-2025-65091 10.0 XWiki Full Calendar Macro displays objects from the wiki on the calendar. Pri... CVE-2025-55730 10.0 XWiki Remote Macros provides XWiki rendering macros that are useful when migr... CVE-2023-27479 9.9 XWiki Platform is a generic wiki platform offering runtime services for appli... CVE-2023-26055 9.9 XWiki Commons are technical libraries common to several other top level XWiki... CVE-2023-26477 9.8 XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and ...
View all Xwiki CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →