CVE-2025-0712

APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

State: Published
Severity: 7.0 High
Published: Jul 30, 2025
Updated: Jul 30, 2025
Reserved: Jan 24, 2025

Read the record on cve.org

Description

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	elastic

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
APM ServerElastic	8.16 through 8.16.2Affected 8.17 through 8.17.0Affected

References

https://discuss.elastic.co/t/beats-windows-installer-9-1-0-security-update-esa-2025-12/380558

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.