Access Control Flaw in Apache CloudStack Enables Unauthorized Template Visibility

CVE-2025-30675

What is CVE-2025-30675?

In Apache CloudStack, a vulnerability exists within the access control mechanisms of the listTemplates and listIsos APIs. This issue can be exploited by a malicious Domain Admin or Resource Admin who specifies the 'domainid' alongside 'filter=self' or 'filter=selfexecutable' values. As a result, it enables unauthorized access, allowing the attacker to gather metadata of templates and ISOs associated with other domains, undermining the intended isolation between domains. Consequently, sensitive configuration details may be exposed. To address this security gap, updates have been released that enforce domain resolution within the caller's specified scope, thus preventing default access to the ROOT domain.

References