CVE-2025-24814

Summary

CVE-2025-24814 is a privilege escalation vulnerability affecting all versions of Apache Solr up to 9.7. This issue allows users to replace "trusted" configset files with arbitrary configuration, bypassing the original files. Affected Solr instances that use the "FileSystemConfigSetService" component and run without authentication and authorization are at risk. Replacement config files, treated as "trusted," can add malicious code to Solr's classpath using "<lib>" tags. Users can mitigate this issue by enabling authentication and authorization or transitioning to SolrCloud. A recommended solution is upgrading to Solr 9.8.0, which disables use of "<lib>" tags by default.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.