CVE-2025-5452 Privilege escalation in AXIS OS
Malicious ACAP apps can steal admin credentials if unsigned app installation is enabled, requiring user interaction to install the app.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-5452?
CVE-2025-5452 is a medium-severity vulnerability in AXIS OS, published on 11 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Weakness: CWE-214
Which versions are affected by CVE-2025-5452?
It affects 1 product.
Products include Axis Axis Os.
How do I fix CVE-2025-5452?
No fix has been published for CVE-2025-5452 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-5452 being exploited?
There is no known exploitation of CVE-2025-5452 in the wild and no public exploit code.
Other vulnerabilities in AXIS OS
Sources
Also known as GHSA-5ww9-v6r8-v66v.