CVE-2025-46066

An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges

Critical · published January 12, 2026

CVSS v3.1
9.9
EPSS
0%
Percentile
27.2
In the wild
Unconfirmed
What it is

🚨 A sneaky privilege escalation flaw in Automai Director v25.2.0 could let attackers climb the ranks without breaking a sweat! 🔥 Imagine a hotel where a guest manages to bypass all the security checks and gains access to the executive suite. This vulnerability essentially allows an attacker to stroll up to the penthouse without a keycard, gaining unauthorized access to sensitive areas. With this vulnerability, an attacker can elevate their privileges and potentially take complete control of the system. This means they could manipulate critical settings, access sensitive data, or even disrupt services entirely. The consequences could be mind-blowingly severe, leading to loss of data integrity and trust.

Put simply

Imagine a hotel where a guest manages to bypass all the security checks and gains access to the executive suite. This vulnerability essentially allows an attacker to stroll up to the penthouse without a keycard, gaining unauthorized access to sensitive areas. CVE-2025-46066 is a privilege escalation vulnerability in Automai Director that allows an attacker to gain elevated permissions on the system without appropriate authorization, putting sensitive operations and data at risk.

What to do

With this vulnerability, an attacker can elevate their privileges and potentially take complete control of the system. This means they could manipulate critical settings, access sensitive data, or even disrupt services entirely. The consequences could be mind-blowingly severe, leading to loss of data integrity and trust. To protect yourself, it’s crucial to immediately patch Automai Director to version 25.2.1 or later. Additionally, review user permissions and ensure that only trusted users have access to critical functions. Regular security audits can help identify any unusual activity. You've got this! Stay vigilant and follow these steps to secure your systems. 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.2th percentile
Published
2026-01-12T00:00Z
EPSS history
Timeline
  • 12 JAN 00:00Z
    An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges
    cvelistv5