Read the docs
TI-2025-11358 Aliases CVE-2025-12381GHSA-mmf6-49fc-cg8h

Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

Priority LOW 28CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
Privilege escalation
Confidentiality · integrity · availability
Low · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.  This issue affects Firewall Analyzer: A33.0, A33.10.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0016 5th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AlgoSecFirewall AnalyzerA33.0 (up to build 320); A33.10 (up to build 220)—No fix listedCNA
  • Firewall Analyzer VendorAlgoSec Affected A33.0 (up to build 320); A33.10 (up to build 220) Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:algosec:firewall_analyzer:a33.0:*:*:*:*:*:*:*a33.0VulnerableAlgoSec
cpe:2.3:a:algosec:firewall_analyzer:a33.10:*:*:*:*:*:*:*a33.10VulnerableAlgoSec
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:x64:*not specified by NVDRunning onLinux
  • cpe:2.3:a:algosec:firewall_analyzer:a33.0:*:*:*:*:*:*:* Versions a33.0 Vulnerable ·AlgoSec
  • cpe:2.3:a:algosec:firewall_analyzer:a33.10:*:*:*:*:*:*:* Versions a33.10 Vulnerable ·AlgoSec
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Linux

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-12381
  2. 2026-10-03 Alias added: GHSA-mmf6-49fc-cg8h

References

Advisory 1

  • TI-2025-11359 Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer CVSS 4.0HIGH 7.3
  • TI-2013-04425 Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall… CVSS 2.0MEDIUM 4.3
  • TI-2013-05983 Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences