Privilege Escalation in SOPlanning by Vendor SOPlanning

CVE-2025-62730

What is CVE-2025-62730?

SOPlanning suffers from a privilege escalation vulnerability within its user management tab. Authenticated users assigned the 'user_manage_team' role can improperly modify user permissions, allowing them to grant administrative access to themselves or other users. This security flaw, which can be exploited through both bulk updates and individual changes to user rights, poses a significant risk if left unaddressed. The issue has been resolved in version 1.55, highlighting the importance of maintaining updated software to mitigate security threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References