CVE-2025-25872
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 14, 2025
Updated: Apr 3, 2025
CWE ID 269
Summary
CVE-2025-25872 is a vulnerability affecting Open Panel version 0.3.4. This issue enables a remote attacker to escalate privileges through the Fix Permissions function. By exploiting this weakness, an attacker can gain elevated access to the system, potentially compromising sensitive data or taking control of critical functions. The exact cause of the vulnerability remains undisclosed, but affected users are urged to update to a patched version of Open Panel to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.