PatchTheCVECVE-2025-5480: Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVE-2025-5480 is a high-severity flaw (CVSS 7.8) affecting agent. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 75%) |
| CISA exploited list | No |
| Weakness | CWE-427 |
| Published | 2025-06-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-5480?
agent: upgrade to 5.218.620.1. Exact commands for each OS are on this page.
Is CVE-2025-5480 being exploited?
CVE-2025-5480 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-5480 affect?
CVE-2025-5480 affects agent. Severity is high (CVSS 7.8). Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute
How urgent is CVE-2025-5480?
Priority 34/100. High severity
Software pages
Related CVEs
- CVE-2026-41288 HIGH 7.8 UPGRADE Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Wi
- CVE-2026-6787 HIGH 7.8 UPGRADE Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in E
- CVE-2026-6788 HIGH 7.8 UPGRADE Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.
- CVE-2026-41287 MEDIUM 6.5 UPGRADE Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow
- CVE-2026-41286 MEDIUM 6.5 UPGRADE Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow