CVE-2025-61955 F5OS vulnerability

High 8.5 Published 15 Oct 2025 Updated 26 Feb 2026

An authenticated local attacker can escalate privileges and cross security boundaries in F5OS-A and F5OS-C systems.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-61955?

CVE-2025-61955 is a high-severity vulnerability in F5OS - Appliance, published on 15 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness: CWE-95

Which versions are affected by CVE-2025-61955?

It affects 2 products.

Products include F5 F5os-A, F5 F5os-C.

How do I fix CVE-2025-61955?

No fix has been published for CVE-2025-61955 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-61955 being exploited?

There is no known exploitation of CVE-2025-61955 in the wild and no public exploit code.

Sources

Also known as GHSA-p73g-98vh-rvr5.