CVE-2025-45472 - Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account

HIGH

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account

Published May 22, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.36%

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account.

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16170		Advisory
https://gist.github.com/zolaer9527/9a703e9dc575bf1889b275caf7121578		Third Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 22, 2025

Updated May 23, 2025

Reserved Apr 22, 2025

Updated May 23, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published May 22, 2025

Updated May 23, 2025

Exploited since n/a