CVE-2026-25825
Received Received - Intake

Arbitrary File Write in Keyfactor SignServer

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: MITRE

Description
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user (with admin access) the possibility to write files in arbitrary directories in the server filesystem and potentially overwrite files accessible by the local user JBoss.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-25825
EUVD
EUVD-2026-78627

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
keyfactor signserver to 7.6.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an admin user to write files to any directory on the server's file system by exploiting improper handling of the output file path in SignerStatusReportWorker. It can overwrite existing files accessible by the local JBoss user.

Detection Guidance

To detect this vulnerability, check for unauthorized file writes in directories accessible by the JBoss user. Look for unexpected files in system directories or modifications to existing files. Review SignServer logs for unusual output file path configurations in SignerStatusReportWorker settings.

Impact Analysis

An attacker with admin access could overwrite critical system files, leading to denial of service, data corruption, or unauthorized code execution. This could compromise the integrity and availability of the SignServer application and the underlying system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by allowing unauthorized file access or modification, potentially exposing sensitive data or disrupting secure operations. Organizations must address it to maintain regulatory compliance.

Mitigation Strategies

Upgrade SignServer to version 7.6.0 or later to resolve the vulnerability. All versions prior to 7.6.0 are affected.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-25825. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart