SolarWinds Product Security Update Advisory

Overview

 

SolarWinds has released security updates to fix vulnerabilities in SolarWinds products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-26397

 

SWOSH Version: 2025.2 and earlier

 

 

Resolved Vulnerabilities

 

Local privilege escalation vulnerability in SolarWinds Observability Self-Hosted (CVE-2025-26397)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-26397

 

SWOSH Version: 2025.2.1

 

 

References

 

[1] SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability (CVE-2025-26397)
https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26397