CVE-2025-59945

HIGH 8.1CVE-2025-59945 · Published 27/09/2025 · updated 09/10/2026

In short

CVE-2025-59945 is a HIGH (CVSS 8.1) vulnerability affecting sysreptor (syslifters).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.1% of all vulnerabilities.
Fix: update to 2025.83 or later.

Package	Affected versions	Patched versions
sysreptor syslifters	`≥ 2024.74, < 2025.83`	`2025.83`

Description

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can assign the is_project_admin permission to their own user. This allows users to read, modify and delete pentesting projects they are not members of and are therefore not supposed to access. This issue has been patched in version 2025.83.

References

Syslifters/sysreptor commit de8b5d8 · Patch
Syslifters/sysreptor security advisory · Vendor Advisory

More vulnerabilities in sysreptor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free