Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-53099

21
FAUCET Score

CVE-2025-53099 is a high-severity vulnerability affecting Sentry, an error tracking and performance monitoring tool, prior to version 25.5.0. It allows an attacker with a malicious OAuth application to exploit a race condition and improper authorization code handling to maintain persistent access to a user's account, even after de-authorization. The attack vector is network-based with high complexity, requiring low privileges, and can lead to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 25.5.0CPE matchmatch criteria
cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

5.5MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
LOW
User Interaction
PASSIVE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
NONE
SS Confidentiality
HIGH
SS Integrity
HIGH
SS Availability
HIGH
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.69%
Probability of exploitation in next 30 days
EPSS Percentile
48.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0069 is in the 45th percentile among its peer group of 1,162 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference
View patch

References

github.com / getsentry/sentry/commit/57f0129e1e977b76fe8d16667a586578791a3dcd
Patch
github.com / getsentry/sentry/commit/ab5fd932ca6bd46529ba3308b4669e3cee719b8f
Patch
github.com / getsentry/sentry/commit/e6241254aead969e6c8490a81cde9a01335df19d
Patch
github.com / getsentry/sentry/pull/85570
Issue TrackingPatch
github.com / getsentry/sentry/pull/85571
Issue TrackingPatch
github.com / getsentry/sentry/pull/86069
Issue Tracking
github.com / getsentry/sentry/pull/86532
Issue Tracking
github.com / getsentry/sentry/security/advisories/GHSA-mgh8-h4xc-pfmj
Vendor Advisory