Privilege Escalation Vulnerability in Autel MaxiCharger AC Wallbox by Autel

CVE-2025-5822

What is CVE-2025-5822?

The Autel MaxiCharger AC Wallbox Commercial Technician API contains a flaw that permits remote attackers to escalate their privileges. This vulnerability arises from improper authorization handling, allowing an attacker with a low-privileged authorization token to gain access to restricted resources. This could lead to unauthorized control over the charging stations, posing significant risks to security and operational integrity.

References