CVE-2025-0139 MEDIUM

CVE-2025-0139: Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability

Vendor Palo Alto Networks
Product Autonomous Digital Experience Manager
Weakness CWE-266
Published July 9, 2025
Last update August 13, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

What the vulnerability does

01Description

An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints to escalate their privileges to root.

Key dates

02Disclosure timeline

July 9, 2025 CVE published
August 13, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-48129 WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability CVE-2025-4374 Quay: incorrect privilege assignment CVE-2024-8253 Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation CVE-2022-20819 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability CVE-2024-13248 Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012