Access Control Flaw in Google ChromeOS Gerrit Configuration

CVE-2025-1568

Summary

An access control vulnerability within the Gerrit project configuration in Google ChromeOS has been identified, allowing attackers with registered Gerrit accounts to inject malicious code into ChromeOS projects. This flaw can lead to potential remote code execution and denial of service due to insufficient access controls and misconfigurations in the project.config file. Affected users should take caution and ensure their configurations are secure to mitigate risks.

References