Log in Start free

Vulnerability · Published Dec 3, 2025 · Assigned by canonical

CVE-2025-7044Privilege Escalation in MAAS via Websocket Request Manipulation

High 7.7

In plain English

A high-severity privilege mismanagement in MAAS from Ubuntu. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.3%top 78.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the is_superuser property set to true. The server improperly validates this input, allowing the attacker to self-promote to an administrator role. This results in full administrative control over the MAAS deployment.

Affected products (as reported)

VendorProductVersions
Ubuntu MAAS 3.3.0 – before 3.3.113.4.0 – before 3.4.93.5.0 – before 3.5.93.6.0 – before 3.6.2

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

References