What is the CVSS score of CVE-2025-7044?

CVE-2025-7044 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Maas are affected by CVE-2025-7044?

CVE-2025-7044 affects MAAS (Metal as a Service) and allows authenticated users to escalate privileges to administrator through improper websocket input validation, granting complete control over…. A patch is available.

How to fix or mitigate CVE-2025-7044?

Within 24 hours: Identify all MAAS deployments in your environment and document current versions. Within 7 days: Apply the vendor-released patch to all affected MAAS instances; restart affected services post-patching. Within 30 days: Audit MAAS user accounts and roles for unauthorized privilege escalation; review websocket traffic logs for suspicious user.update requests with is_superuser modifications.

Maas CVE-2025-7044

EUVD-2025-201010 HIGH

Improper Privilege Management (CWE-269)

2025-12-03 security@ubuntu.com

Privilege Escalation Maas

7.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:24 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

3.4.9,3.3.11,3.5.9

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-201010

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

CVE Published

Dec 03, 2025 - 16:16 nvd

HIGH 7.7

DescriptionCVE.org

An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the is_superuser property set to true. The server improperly validates this input, allowing the attacker to self-promote to an administrator role. This results in full administrative control over the MAAS deployment.

Analysis

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized. This vulnerability is classified as Improper Privilege Management (CWE-269).

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).