CVE-2025-4636

CVE-2025-4636 describes a privilege escalation vulnerability in the airpointer web platform, where excessive privileges granted to the web user allow an attacker to gain root access if they compromise that user account. This is a high-severity vulnerability with a CVSS score of 7.8, indicating that a local attacker with low privileges can achieve high impact on confidentiality, integrity, and availability without user interaction. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.