What’s Vulnerable › Vulnerabilities

CVE-2025-35114: Agiloft local privilege escalation via default credentials

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-26 · updated 2026-06-17
• Weakness: CWE-1392

Description

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.

Affected products

• Agiloft: from 19 before 30 — fixed in 30

How to fix

Upgrade to a fixed version: Agiloft 30. Check the vendor advisory for mitigations.

References

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json
• https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution
• https://www.cve.org/CVERecord?id=CVE-2025-35114

Get alerted when CVE-2025-35114 or the next vulnerability affects your stack