Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-12381 EUVD-2025-202049GHSA-mmf6-49fc-cg8h

Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

Published Dec 9, 2025 · Updated Dec 9, 2025 · Assigned by AlgoSec

Description

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection.

A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. 
This issue affects Firewall Analyzer: A33.0, A33.10.

Affected products

VendorProductAffectedFixed
AlgoSec Firewall Analyzer A33.0 (up to build 320), A33.10 (up to build 220) —

References