VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 17, 2025· Updated Jun 17, 2026

CVE-2025-67793

CVE-2025-67793

Description

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6. Users with the "Manage roles and permissions" privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the Administrator role. This issue mainly affects cloud multi-tenant deployments; on-prem single-tenant installations are typically not impacted because local admins usually already have Supervisor privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • DriveLock/DriveLock2 versions
    cpe:2.3:a:drivelock:drivelock:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:drivelock:drivelock:*:*:*:*:*:*:*:*range: >=24.1,<=24.1.6
    • (no CPE)range: 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6
  • DriveLock/DriveLockdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.