VULNERABILITY INTELLIGENCE

CVE-2025-14272

CVSS score8.3 HIGH

EPSS probability0.24%

CISA KEVNot currently listed

Published2026-06-16

Last modified2026-10-07

Description

A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.