Privilege Escalation Vulnerability in SAPCAR by SAP

CVE-2025-42992

What is CVE-2025-42992?

The vulnerability in SAPCAR allows an attacker with high-level privileges to create a harmful SAR archive, potentially leading to exploitation of critical file and directory permissions. This exploit maintains signature validation, which could result in serious integrity impacts while posing minimal risks to confidentiality and availability. Organizations using SAPCAR should implement security measures and stay updated to mitigate these risks.

References