CVE-2025-27028 Read access of deprivileged Radiflow iSAP Smart Collector user
A deprivileged user can read the entire file system, exposing sensitive data like root password hashes in Radiflow iSAP Smart Collector.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-27028?
CVE-2025-27028 is a medium-severity vulnerability in Radiflow iSAP Smart Collector, published on 9 Jul 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, including files belonging to other users and having restricted access (like, for example, the root password hash).
Weakness: CWE-266
Which versions are affected by CVE-2025-27028?
How do I fix CVE-2025-27028?
No fix has been published for CVE-2025-27028 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-27028 being exploited?
There is no known exploitation of CVE-2025-27028 in the wild and no public exploit code.
Sources
Also known as GHSA-9wgg-rvm3-rcm8.