PatchTheCVECVE-2024-9257: Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vulnerability
CVE-2024-9257 is a medium-severity flaw (CVSS 6.5) affecting unified secops platform. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files within sensitive directories on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the delete_gsuite_key_file endpoint. The issue results from the lack of proper validatio
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.6% (top 51%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2024-11-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-9257?
unified secops platform: upgrade to 6.4.26. Exact commands for each OS are on this page.
Is CVE-2024-9257 being exploited?
CVE-2024-9257 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-9257 affect?
CVE-2024-9257 affects unified secops platform. Severity is medium (CVSS 6.5). Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files within sensitive directories on affected installations of Lo
How urgent is CVE-2024-9257?
Priority 35/100. No elevated risk signals yet.
Related CVEs
- CVE-2025-1044 CRITICAL 9.8 UPGRADE Logsign Unified SecOps Platform Authentication Bypass Vulnerability
- CVE-2024-7604 HIGH 7.8 DOWNGRADE Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability
- CVE-2024-7603 HIGH 8.1 DOWNGRADE Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability
- CVE-2024-7602 MEDIUM 6.5 DOWNGRADE Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability
- CVE-2024-7601 HIGH 8.1 DOWNGRADE Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerabili