| 防御层 | 机制 | EVE-NG 6.2.0-4 | PNETLab 5.3.11 | 差距说明 | | :--- | :--- | :--- | :--- | :--- | | | Shell元字符清洗 | escapeshellcmd() – PHP标准库函数，过滤所有shell元字符 | secureCmd() – 自定义函数，仅过滤部分字符 | PNETLab 不过滤 $() ，是 CVE-2025-63749 的直接成因。 | | L2 | 圆括号转义 | preg_replace 将 ( ) 转义，使命令替换失效 | 无 | PNETLab 完全缺失此层防护。 | | L3 | 引号转义 | addslashes() – 防止参数截断破坏命令行结构 | 无等价措施 | PNETLab 完全缺失此层。 | | L4 | chroot隔离 | chroot(".") – 限制 QEMU 进程在运行目录内 | 无 chroot | PNETLab 的 QEMU 进程可直接访问宿主机文件系统。 | | L5 | 进程组权限限制 | setgid(32768) – 设置到 unl 组 | 以 root 运行，无限制 | 两者均以 root 身份运行 QEMU 节点，是共同短板。 | | L6 | 只读挂载保护 | mount -B -o ro + chattr +i – 镜像目录只读 | 无 | PNETLab 被入侵后镜像文件可被篡改。 |
Requires an iourc license file placed in the same directory to function. /opt/unetlab/addons/dynamips/ Legacy Cisco IOS images ( .image or .bin files). Fixing Permissions: The Mandatory Command
Research and vulnerability reports for focus heavily on critical security flaws discovered in late 2024 and 2025. This version of the popular network simulation platform is susceptible to several high-impact vulnerabilities that allow for remote code execution and redirection attacks. Critical Security Vulnerabilities Pnetlab 5.3.11
The font color has been updated to orange, providing higher contrast and better readability on both light and dark background themes. 2. HTML5 Console Fixes
| Metric | PNETLab 5.2.9 | PNETLab 5.3.11 | Improvement | | :--- | :--- | :--- | :--- | | Boot time (10 routers) | 2min 14sec | 1min 48sec | | | CPU idle load | 8% | 4% | 50% reduction | | RAM overhead (base system) | 2.1GB | 1.2GB | ~1GB saved | | Web UI load time | 3.2 sec | 1.4 sec | Significant | | Image import (4GB) | 8 min | 5 min | Faster I/O | | 防御层 | 机制 | EVE-NG 6
Run the main upgrade binary. Once the script completes its execution, restart the machine to finalize the installation: ./upgrade/upgrade reboot Use code with caution. Copied to clipboard ✅ Results
: Users on older 4.x versions can use an Upgrade Script to move directly to 5.3.11. This version of the popular network simulation platform
Added specific template support ( macos_simple_kvm ) for running macOS images within the KVM environment. Pnetlab 5.3.11 Upgrade Process