CVE-2025-27232

An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.

Score

CVSS 4.0 6.8 Medium

Status

Analyzed - security@zabbix.com

Published

2025-12-01

Last modified

2025-12-01

Weaknesses

CWE-918

Affected products

• Frontend (Zabbix)
• Zabbix (Zabbix)

References

• https://support.zabbix.com/browse/ZBX-27282