CVE-2025-0712

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

• CWE-427

• https://discuss.elastic.co/t/beats-windows-installer-9-1-0-security-update-esa-2025-12/380558

Published

Jul 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0706A vulnerability was found in JoeyBling bootplus up to 247d5f…5.4
• CVE-2025-0707A vulnerability was found in Rise Group Rise Mode Temp CPU 2…8.5
• CVE-2025-0708A vulnerability was found in fumiao opencms 2.2. It has been…5.4
• CVE-2025-0709A vulnerability was found in Dcat-Admin 2.2.1-beta. It has b…4.8
• CVE-2025-0710A vulnerability classified as problematic has been found in …5.4
• CVE-2025-0711Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-0714The vulnerability exists in the password storage of Mobateks…6.5
• CVE-2025-0716Improper sanitization of the value of the 'href' and 'xlink:…4.8
• CVE-2025-0717To exploit the vulnerability, it is necessary:3.5
• CVE-2025-0718The Nested Pages WordPress plugin before 3.2.13 does not san…4.8
• CVE-2025-0719IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vuln…6.1
• CVE-2025-0720A vulnerability was found in Microword eScan Antivirus 7.0.3…5.5