CVE-2025-26397
SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.
Reserved 2025-02-08 | Published 2025-07-24 | Updated 2025-07-24 | Assigner SolarWindsCWE-502 Deserialization of Untrusted Data
ccc working with the Trend Micro Zero Day Initiative
www.solarwinds.com/...ter/security-advisories/CVE-2025-26397
documentation.solarwinds.com/...m_2025-2-1_release_notes.htm
Support options
