PT-2025-24631 · Unknown · Upkeeper Instant Privilege Access

Published 2025-06-10 · Updated 2025-06-10 · CVE-2025-4680

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions upKeeper Instant Privilege Access versions prior to 1.4.0

Description The issue is related to improper input validation, allowing the exploitation of incorrectly configured access control security levels.

Recommendations For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-4680

Affected Products

Upkeeper Instant Privilege Access

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-4680 · Security Note
• https://t.me/cvetracker/25885 · Telegram Post
• https://support.upkeeper.se/hc/en-us/articles/20159822847900-CVE-2025-4680-Improper-Input-Validation · Note
• https://twitter.com/CVEnew/status/1932359543834435919 · Twitter Post
• https://twitter.com/transilienceai/status/1932426329900609741 · Twitter Post