CVE-2025-12381CWE-269privilege-escalation

CVE-2025-12381

High · published December 9, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

⚠️ A crafty local user can escalate privileges with a simple command hack! In AlgoSec Firewall Analyzer, what seems like an ordinary parameter can be the ticket to the high-security zone. 💡 Think of the sudoers file as a trusted guest list at an exclusive party. If someone finds a way to slip a forged invitation into the mix, they could saunter in and access areas off-limits to most—like sneaking a peek in the VIP lounge! An attacker could exploit this privilege escalation to access sensitive configuration settings or modify firewall rules, potentially compromising the security of the entire network. This could lead to unauthorized access, data leaks, or worse—your security could be at serious risk!

Put simply

Think of the sudoers file as a trusted guest list at an exclusive party. If someone finds a way to slip a forged invitation into the mix, they could saunter in and access areas off-limits to most—like sneaking a peek in the VIP lounge! This vulnerability allows local users with command line access to escalate their privileges by manipulating parameters in commands that are already approved in the sudoers file. Essentially, it's a flaw in how privileges are managed within the AlgoSec Firewall Analyzer.

What to do

An attacker could exploit this privilege escalation to access sensitive configuration settings or modify firewall rules, potentially compromising the security of the entire network. This could lead to unauthorized access, data leaks, or worse—your security could be at serious risk! Update AlgoSec Firewall Analyzer to the latest version (at least A33.11) to fix this issue and review your sudoers file to ensure proper privilege management practices are in place. Regular auditing can also help catch any unauthorized parameter manipulations before they become a problem. You've got this! With these steps, you'll have your system locked down in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-12-09T21:17Z
Affected products (2)
ProductVersionsFixed in
algosec/firewall_analyzerall versions—
algosec/firewall_analyzerall versions—
References (1)
EPSS history
Timeline
  • 09 DEC 13:41Z
    Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer
    cvelistv5