Privilege Escalation Vulnerability in F5OS Systems by F5 Networks
CVE-2025-61955

8.5HIGH

Key Information:

Vendor

F5
Status
F5os - Appliance
F5os - Chassis
Vendor
CVE Published:
15 October 2025

What is CVE-2025-61955?

A vulnerability in F5OS-A and F5OS-C systems allows an authenticated attacker with local access to escalate their privileges. This may result in the attacker crossing established security boundaries, potentially leading to unauthorized access and manipulation of sensitive data. It is important to note that versions of the software that have reached End of Technical Support (EoTS) are not subject to this evaluation.

Affected Version(s)

F5OS - Appliance 1.8.0 < 1.8.3

F5OS - Appliance 1.5.0 < 1.5.4

F5OS - Chassis 1.8.0 < 1.8.2

References

https://my.f5.com/manage/s/article/K000156771
vendor-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
JSON
.
CVE-2025-61955 : Privilege Escalation Vulnerability in F5OS Systems by F5 Networks