CVE-2025-39367

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Apr 28, 2025
Updated: Apr 29, 2025
CWE ID 862

Summary

CVE-2025-39367 is a security vulnerability affecting the SeventhQueen Kleo software. This issue involves a missing authorization check that exposes the system to unauthorized access. Specifically, before version 5.4.4, Kleo lacks adequate authorization controls, leading to potential security breaches. Attackers could exploit this vulnerability to gain unauthorized access to the affected system, potentially leading to data theft, system damage, or further attacks. Organizations using SeventhQueen Kleo are advised to upgrade to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share