Vulnerability in Elastic Beats
CVE-2025-25011
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may…
EPSS: 0.001 (3.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Elastic Beats — versions 8.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-25011?
- CVE-2025-25011 is a high-severity vulnerability in Elastic Beats, classified under Uncontrolled Search Path Element. CVSS score: 7.0/10. Published 2025-07-30.
- How severe is CVE-2025-25011?
- High severity. CVSS v3 base score is 7.0 out of 10.