What’s Vulnerable › Vulnerabilities

CVE-2025-12381: Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-07
• Weakness: CWE-269

Description

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.  This issue affects Firewall Analyzer: A33.0, A33.10.

Affected products

• AlgoSec Firewall Analyzer: a33.0, a33.10

References

• https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12381.htm

Get alerted when CVE-2025-12381 or the next vulnerability affects your stack