CVE-2025-11906Privilege escalation via writable configuration files in Progress Flowmon

Description

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://community.progress.com/s/article/Progress-Flowmon-CVE-2025-11906 vendor-advisory