CVE-2025-25013

—

CVSS 3.1

6.5 medium

EPSS

<1%p29

Published

Apr 8, 2025 (Apr 8, 2025)

Modified

Jun 17, 2026

Description

Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.

Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.