CVE-2025-12381

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

Dec 9, 2025

CISA due date

—

The record

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This issue affects Firewall Analyzer: A33.0, A33.10.

Affected packages

Ecosystem	Package	Introduced	Fixed