CVE-2025-13917CWE-269

Elevation of Privileges in Web Security Services (WSS) Agent

High · published January 28, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

⚡ Before you hit that upgrade button, know this: WSS Agent versions prior to 9.8.5 have a sneaky Elevation of Privilege vulnerability! Think of it like an unmonitored backstage door at a concert. If an unauthorized person finds it, they can waltz right in and access areas that should be off-limits, like the VIP section! If attackers exploit this vulnerability, they could gain access to restricted resources, potentially compromising sensitive information and systems. This could lead to unauthorized actions being performed under the guise of a legitimate user, causing chaos and significant data breaches!

Put simply

Think of it like an unmonitored backstage door at a concert. If an unauthorized person finds it, they can waltz right in and access areas that should be off-limits, like the VIP section! This Elevation of Privilege vulnerability allows attackers to gain elevated access within the WSS Agent application, enabling them to perform actions that are usually reserved for higher-privileged users.

What to do

If attackers exploit this vulnerability, they could gain access to restricted resources, potentially compromising sensitive information and systems. This could lead to unauthorized actions being performed under the guise of a legitimate user, causing chaos and significant data breaches! Upgrade WSS Agent to version 9.8.5 immediately to close this vulnerability. Additionally, review permissions and access controls to ensure no unauthorized access can occur. Regularly monitor and audit your systems for any suspicious activity! You've got this! With these steps, you’ll secure your application and keep those backstage doors locked! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00099 · 0.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-01-28T16:29Z
EPSS history
Timeline
  • 28 JAN 16:29Z
    Elevation of Privileges in Web Security Services (WSS) Agent
    cvelistv5