CVE-2025-27134

CVE-2025-27134 is a high-severity privilege escalation vulnerability affecting Joplin Server versions prior to 3.3.3. It allows authenticated, non-admin users to exploit an API endpoint to gain administrative privileges, enabling unauthorized actions. The vulnerability has a CVSS score of 8.8 (High) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not currently listed on CISA's KEV catalog, a Nuclei template exists for detection, and the vulnerability has garnered significant community discussion, indicating potential for future exploitation.