CVE-2025-26397

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-26397
SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-2-1_release_notes.htm Release Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26397 Vendor Advisory Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:observability_self-hosted:*:*:*:*:*:*:*:*
History

12 Nov 2025, 19:17

Type Values Removed Values Added
Summary
  • (es) SolarWinds Observability Self-Hosted es susceptible a la vulnerabilidad de escalada de privilegios locales por deserialización de datos no confiables. Un atacante con privilegios bajos puede escalarlos para ejecutar archivos maliciosos copiados a una carpeta protegida con permisos. Esta vulnerabilidad requiere autenticación desde una cuenta de bajo nivel y acceso local al servidor host.
References () https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-2-1_release_notes.htm - () https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-2-1_release_notes.htm - Release Notes
References () https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26397 - () https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26397 - Vendor Advisory, Patch
CPE cpe:2.3:a:solarwinds:observability_self-hosted:*:*:*:*:*:*:*:*
First Time Solarwinds
Solarwinds observability Self-hosted

24 Jul 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-24 08:15

Updated : 2025-11-12 19:17

NVD link : CVE-2025-26397

Mitre link : CVE-2025-26397

CVE.ORG link : CVE-2025-26397

JSON object : View

Products Affected

solarwinds

  • observability_self-hosted
CWE
CWE-502

Deserialization of Untrusted Data