Vulnerability in Elastic Apm Server
CVE-2025-0712
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may…
EPSS: 0.001 (3.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Elastic Apm Server — versions 8.16, 8.17
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-0712?
- CVE-2025-0712 is a high-severity vulnerability in Elastic Apm Server, classified under Uncontrolled Search Path Element. CVSS score: 7.0/10. Published 2025-07-30.
- How severe is CVE-2025-0712?
- High severity. CVSS v3 base score is 7.0 out of 10.