CVE-2025-2421: Felisify Sambabox

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1.

Affected products

• Felisify Sambabox: before 5.1 (fixed in 5.1)

Published 2025-05-02. Last modified 2026-06-17.