CVE-2025-58097

High · 7.8

CVSS

7.8

EPSS

0.1%

Published

Nov 21, 2025

CISA due date

—

The record

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege.

Affected packages

Ecosystem	Package	Introduced	Fixed