Description
SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | SolarWinds Observability Self-Hosted | 2025.2 and previous versions | — |
Advisories 1
- WID-SEC-2025-1632 SolarWinds Platform: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jul 23, 2025