What’s Vulnerable › Vulnerabilities

CVE-2025-45471

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-05-22 · updated 2026-06-17
• Weakness: CWE-732

Description

Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account.

Affected products

• Lumigo Measure-Cold-Start: through 1.4.1

References

• https://gist.github.com/zolaer9527/549d5f466359829a3f1aaafebe7ecc3f
• https://github.com/lumigo-io/SAR-measure-cold-start/issues/32

Get alerted when CVE-2025-45471 or the next vulnerability affects your stack