VYPR
← All advisories
High severity8.1NVD Advisory· Published Jan 12, 2026· Updated Jun 17, 2026

CVE-2025-41078

CVE-2025-41078

Description

Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the generation and signing of documents.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Viafirma/Documentsllm-fuzzy2 versions
    <3.7.129+ 1 more
    • (no CPE)range: <3.7.129
    • cpe:2.3:a:viafirma:documents:*:*:*:*:*:-:*:*range: <3.7.139
  • Viafirma/Viafirma Documentsv5
    Range: v3.7.129
  • Viafirma/Documents Compose
    cpe:2.3:a:viafirma:documents_compose:*:*:*:*:*:*:*:*
    Range: <1.9.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.