CVE-2025-4680 Improper Input Validation

Severity: High

CVE ID: CVE-2025-4680

Details

These advisory addresses an agent miss configuration where agent fails to select correct configuration if multiple configurations are applied. 

Problem type: CWE-20

Impact: CAPECT-180

Applicability

This advisory is applicable only when

* - Applicable only if the agent is configured through portal and group policy.

Impact

This vulnerability gives a user different rights depending on rules applied at every given time.

Fix

This issue can be fixed by updating the upKeeper Instant Privilege Access agent to version 1.4.0 or later.

Acknowledgements

This vulnerability was found and reported internally.

Please contact our security team (secure@upkeeper.se) for security related questions and product support (help@upkeeper.se) for questions about our products or services.