CVE-2025-40541

Published Feb 24, 2026

Last updated 2 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-40541 is an Insecure Direct Object Reference (IDOR) vulnerability identified in SolarWinds Serv-U, a managed file transfer server software. This flaw allows a malicious actor with existing administrative privileges to execute native code as a privileged account. The vulnerability stems from improper authorization mechanisms that fail to adequately validate object references, enabling attackers to manipulate these references to gain unauthorized access to system resources. This issue requires administrative credentials for exploitation. While the risk on Windows deployments is considered somewhat mitigated due to services often running under less-privileged accounts by default, exploitation on other platforms or in misconfigured environments could lead to broader system compromise. The vulnerability affects SolarWinds Serv-U versions prior to 15.5.4.

Description: An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.
Source: psirt@solarwinds.com
NVD status: Analyzed
Products: serv-u

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.2
Impact score: 5.9
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

psirt@solarwinds.com: CWE-704
nvd@nist.gov: CWE-639

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "0879DDA2-3F57-41C7-A689-4B904310687E",
            "versionEndExcluding": "15.5.4",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.