What is CVE-2025-35114?

CVE-2025-35114 is a high-severity vulnerability in Agiloft, classified under CWE-1392. CVSS score: 7.5/10. Published 2025-08-26.

How severe is CVE-2025-35114?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Agiloft

CVE-2025-35114

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.

EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Agiloft — versions 0, Release 30
Atlassian Agiloft

Weakness classification (CWE)

CWE-1392

References

9119a7d8-5eab-497f-8521-727c672e3725 (Release Notes, Vendor Advisory)
9119a7d8-5eab-497f-8521-727c672e3725 (Third Party Advisory)
9119a7d8-5eab-497f-8521-727c672e3725 (Third Party Advisory)

Frequently asked questions

What is CVE-2025-35114?: CVE-2025-35114 is a high-severity vulnerability in Agiloft, classified under CWE-1392. CVSS score: 7.5/10. Published 2025-08-26.
How severe is CVE-2025-35114?: High severity. CVSS v3 base score is 7.5 out of 10.