CVE-2025-31774

Summary

CVE-2025-31774 is a critical vulnerability affecting the WebProtect.ai Astra Security Suite. The issue stems from a missing authorization control, which allows unauthorized access to certain functionalities. Malicious actors can exploit this vulnerability to manipulate incorrectly configured access control security levels. This weakness affects all versions of the Astra Security Suite from n/a through 0.2. Successful exploitation could lead to potential data breaches and unauthorized system modifications. Organizations using the Astra Security Suite are advised to apply the necessary updates as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.