PT-2025-37865 · Unknown · Passwordstate

Published 2025-09-16 · Updated 2025-09-16 · CVE-2025-59453

Positive Technologies (AI Summary)

CVSS v3.1

3.2

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Passwordstate versions prior to 9.9 Build 9972

Description Passwordstate emergency access may be bypassed by using a crafted URL while on the Emergency Access web page, potentially granting unauthorized access to the Administration section.

Recommendations Update Passwordstate to version 9.9 Build 9972 or later.

Fix

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2025-59453

Affected Products

Passwordstate

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-59453 · Security Note
• https://t.me/CVEtracker/32588 · Telegram Post
• https://clickstudios.com.au/passwordstate-changelog.aspx · Note
• https://twitter.com/CVEnew/status/1967819469532614979 · Twitter Post
• https://clickstudios.com.au/security/advisories · Note