CVE advisoryCRITICAL
CVE-2025-66385
Cerebrate Privilege Escalation via User Edit Endpoint
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A privilege escalation vulnerability in the Cerebrate application's user-edit endpoint allows authenticated, non-privileged users to gain elevated roles, such as administrator, by modifying specific fields in edit requests. This could lead to unauthorized control over the system and impact data integrity. Readers shoul