PT-2026-4774 · Unknown · Springblade

Published 2026-01-26 · Updated 2026-01-31 · CVE-2025-70982

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SpringBlade version 4.5.0

Description A flaw exists in the importUser function that allows attackers with limited privileges to import sensitive user data without proper authorization. The issue is due to incorrect access control.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the importUser function until a patch is available.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-70982

Affected Products

Springblade

References · 9

• 🔥 https://github.com/chillzhuang/SpringBlade/issues/34 · Exploit
• https://osv.dev/vulnerability/CVE-2025-70982 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70982 · Security Note
• https://github.com/chillzhuang/SpringBlade · Note
• https://twitter.com/TheHackerWire/status/2015851473780015551 · Twitter Post
• https://gist.github.com/old6ma/ea60151aa40ddc1cfb51fbaa0c173117 · Note
• https://twitter.com/CVEnew/status/2015841314361741404 · Twitter Post
• https://twitter.com/cracbot/status/2017553510733386007 · Twitter Post
• https://twitter.com/CveFindCom/status/2016133281415086483 · Twitter Post