CVE-2025-45471

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
May 22, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-454728.8Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account.CVE-2025-454747.3maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings.CVE-2025-454755.4maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.CVE-2025-454799.8Insufficient security mechanisms for created containers in educoder challenges v1.0 allow attackers to execute arbitrary code via injecting CVE-2025-45489.8A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the fileCVE-2025-454803.0Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.CVE-2025-454879.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.CVE-2025-454889.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailexCVE-2025-454899.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostnaCVE-2025-45499.8A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of thCVE-2025-454909.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the passwoCVE-2025-454919.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the userna
CVE-2025-45471: High severity, CVSS 8.8 | Vulnix