CVE-2025-47849

A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 . A malicious Domain Admin user in the ROOT domain can bypass restrictions to obtain the API key and secret key of user-accounts with an Admin role type in the same domain. This allows the attacker...