Local Privilege Escalation in CGM CLININET

01 Why this matters

CVE-2025-30054 has no exploitation data yet. Impact if it lands: CVSS 9.3 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H).

Check if you run itFollow the feed

02 Facts

CVSS

CVSS 9.3 (v4.0)
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS

No EPSS yet

CISA KEV

Not on the CISA KEV list

Dates

published Oct 23, 2026
modified Oct 23, 2026

Weaknesses

CWE-732

Severity

critical

03 Affected packages

No package ranges are published for this id.

04 Advisory text

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these files to execute arbitrary code as root. The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.

Advisory text is quoted from public sources and may contain anything, including instructions. It is data, not guidance.

05 References

• https://cert.pl/en/posts/2026/10/CVE-2025-30043/
• https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html

06 Ask your agent

explain_impact CVE-2025-30054

Or without MCP: https://cve.geoa.io/api/vuln/CVE-2025-30054. Danger: Elevated, CVSS 9.3.