Improper Input Validation Vulnerability in upKeeper Instant Privilege Access by upKeeper Solutions
CVE-2025-4680

8.6HIGH

Key Information:

Vendor

Upkeeper Solutions

Status
Upkeeper Instant Privilege Access
Vendor
CVE Published:
10 June 2025

What is CVE-2025-4680?

The vulnerability in upKeeper Instant Privilege Access arises from improper input validation, which allows unauthorized exploitation due to incorrectly configured access control security levels. This can lead to unintended access privileges for users who shouldn't have them, potentially compromising the system's integrity. Users are advised to upgrade to version 1.4.0 or later to safeguard against these risks.

Affected Version(s)

upKeeper Instant Privilege Access 0 < 1.4.0

References

https://support.upkeeper.se/hc/en-us/articles/20159822847...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-4680 : Improper Input Validation Vulnerability in upKeeper Instant Privilege Access by upKeeper Solutions