CVE-2025-11761CWE-427

CVE-2025-11761

High · published November 3, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

⚡ A privilege escalation vulnerability has been spotted in the HP Client Management Script Library that could let an attacker take control during installation! Think of it this way: it’s like a construction worker finding a way to get access to the blueprints of a building before it's even built — they could change everything from the foundation to the roof! If a malicious actor exploits this vulnerability, they could gain elevated permissions and take over the system during installation. This could lead to unauthorized access to sensitive data, making it a potentially severe risk for users and organizations alike!

Put simply

Think of it this way: it’s like a construction worker finding a way to get access to the blueprints of a building before it's even built — they could change everything from the foundation to the roof! This vulnerability arises during the installation process, where insufficient safeguards might allow an attacker to escalate their privileges within the HP Client Management Script Library.

What to do

If a malicious actor exploits this vulnerability, they could gain elevated permissions and take over the system during installation. This could lead to unauthorized access to sensitive data, making it a potentially severe risk for users and organizations alike! To mitigate this risk, ensure that you update to the latest version of HP Client Management Script Library as soon as patches are available. Regularly check for updates and monitor your systems for any unauthorized installations. You've got this! Stay proactive and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-11-03T21:15Z
Affected products (1)
ProductVersionsFixed in
hp/client_management_script_library< 1.8.51.8.5
References (1)
EPSS history
Timeline
  • 03 NOV 15:13Z
    HP Client Management Script Library – Security Update
    cvelistv5