CVE-2025-9918CWE-22path-traversal

CVE-2025-9918

published September 11, 2025

CVSS
8.7
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

A Path Traversal vulnerability in the archive extraction component in Google SecOps SOAR Server (versions 6.3.54.0, 6.3.53.2, and all prior versions) allows an authenticated attacker with permissions to import Use Cases to achieve Remote Code Execution (RCE) via uploading a malicious ZIP archive containing path traversal sequences.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-09-11T12:15Z
References (2)
https://cloud.google.com/chronicle/docs/security-bulletins#GCP-2025-049 · f45cbf4e-4146-4068-b7e1-655ffc2c548chttps://cloud.google.com/support/bulletins?gcp-2025-049 · f45cbf4e-4146-4068-b7e1-655ffc2c548c
EPSS history
Timeline
  • 11 SEP 07:37Z
    Zip Slip in Google SecOps SOAR allows for Remote Code Execution
    cvelistv5