Critical severity9.0NVD Advisory· Published Feb 12, 2026· Updated Apr 15, 2026

CVE-2025-69634

Description

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who indicates that exploitation can only occur if an unprivileged user knows the token of an admin user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dolibarr/Dolibarrllm-fuzzy
Range: = v.22.0.9

Patches

Vulnerability mechanics

References

github.com/simone97212/vuln-research/tree/main/CVE-2025-69634nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000