Weekly Metasploit Update: Modules for Audiobookshelf, LiteLLM, Next.js, Dalfox and more

Rapid7 released a Metasploit framework update adding multiple new exploit and scanner modules that materially lower the bar for attackers: notable additions include an Audiobookshelf unauthenticated API authentication bypass detector (CVE-2025-25205), a BerriAI LiteLLM proxy pre-auth SQL injection scanner, Next.js middleware authorization bypass scanning, a Dalfox deserialization RCE scanner, and an exploit for Paperclip AI allowing unauthenticated full remote code execution (CVE-2026-41679). The release also includes a local NTLM relay privilege escalation module, post-exploitation/automation