Privilege Escalation Vulnerability in Axis ACAP Application Framework

CVE-2025-5718

What is CVE-2025-5718?

The Axis ACAP Application Framework presents a vulnerability that may lead to privilege escalation via a symlink attack. This risk is activated when Axis devices are configured to permit the installation of unsigned ACAP applications. If a user is manipulated into installing a malicious application, it opens the door for attackers to exploit this vulnerability, elevating their permissions and potentially compromising the device's security.

References