CVE-2025-41670

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.

• CWE-427

• https://www.certvde.com/en/advisories/VDE-2026-050/

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-41664A low-privileged remote attacker could gain unauthorized acc…7.5
• CVE-2025-41665An low privileged remote attacker can enforce the watchdog o…6.5
• CVE-2025-41666A low privileged remote attacker with file access can replac…8.8
• CVE-2025-41667A low privileged remote attacker with file access can replac…8.8
• CVE-2025-41668A low privileged remote attacker with file access can replac…8.8
• CVE-2025-41669The Web-based Management allows a remote low privileged Engi…8.8
• CVE-2025-41672A remote unauthenticated attacker may use default certificat…10
• CVE-2025-41673A high privileged remote attacker can execute arbitrary syst…7.2
• CVE-2025-41674A high privileged remote attacker can execute arbitrary syst…7.2
• CVE-2025-41675A high privileged remote attacker can execute arbitrary syst…7.2
• CVE-2025-41676A high privileged remote attacker can exhaust critical syste…4.9
• CVE-2025-41677A high privileged remote attacker can exhaust critical syste…4.9