Improper Authorization Vulnerability in Pavilion by Rockwell Automation

CVE-2025-14272

What is CVE-2025-14272?

A security issue has been detected in Pavilion resulting from insufficient enforcement of authorization protocols within its API endpoints. This weakness may enable unauthorized individuals to carry out privileged actions, such as managing users and roles or executing other administrative tasks without proper permissions. Such vulnerabilities can pose significant risks by compromising the integrity and security of user data and system operations.

References