PT-2026-25675 · Truesec · Lapswebui

Published 2026-03-16 · Updated 2026-03-16 · CVE-2025-15552

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Truesec’s LAPSWebUI versions prior to 2.4

Description A flaw exists in Truesec’s LAPSWebUI that relates to insufficient session expiration. An attacker gaining access to a workstation may be able to elevate their privileges through the disclosure of a local administrator password.

Recommendations Update Truesec’s LAPSWebUI to version 2.4 or later.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-15552

Affected Products

Lapswebui

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-15552 · Security Note
• https://twitter.com/CVEnew/status/2033583672042119385 · Twitter Post
• https://labs.reversec.com/advisories/2026/03/long-session-lifetime-in-truesec-lapswebui · Note