CVE-2025-46544

Summary

CVE-2025-46544 is a vulnerability affecting Sherpa Orchestrator version 141851. This issue grants a low-privileged user the ability to elevate their privileges by creating new users and roles within the system, potentially enabling unauthorized access and modifications. By exploiting this vulnerability, an attacker could gain elevated administrative control, posing a significant risk to the security and integrity of the impacted environment. Organizations using Sherpa Orchestrator are strongly advised to apply the necessary patches or updates to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.