CVE 8.8 HIGH

Non-admin users may erroneously be granted cluster-level SSH access_CVE-2025-10650

8.8 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH.

Basic Information

ID CVE-2025-10650
Source SoftIron
Published Sep 18, 2025 at 19:11

Affected Product

Vendor SoftIron
Product HyperCloud
Version 2.5.0
Affected Versions SoftIron HyperCloud 2.5.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.