Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-40549

SolarWinds Serv-U Path Restriction Bypass Vulnerability

Description

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences in how paths and home directories are handled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Serv-U

Default version status: affected

  • SolarWinds Serv-U 15.5.2 and prior versionsaffected

References