CVE-2025-43001
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
24/100
Published: 2025-07-08
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
Required
S:
Changed
C:
Low
I:
High
A:
Low
Description
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system.