Authorization Logic Flaw in Orthanc by Quantifind

CVE-2025-15581

What is CVE-2025-15581?

An authorization logic flaw in the HTTP Basic Authentication implementation of Orthanc versions prior to 1.12.10 allows attackers to exploit the vulnerability and gain unauthorized access. This could facilitate privilege escalation, potentially allowing malicious actors to obtain full administrative access to sensitive data and system functionalities. Users of affected versions are advised to upgrade to the latest version to mitigate the risk.

References