---
id: CVE-2025-13808
title: >-
  A flaw has been found in orionsec orion-ops up to
  5925824997a3109651bbde07460958a7be249ed1
summary: >-
  A flaw has been found in orionsec orion-ops up to
  5925824997a3109651bbde07460958a7be249ed1. Affected by this vulnerability is
  the function update of the file
  orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/UserContro…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-266
  - CWE-285
vendor: orionsec
product: orion-ops
affected:
  - orion-ops <= 2025-08-01
published: '2025-12-01'
updated: '2026-09-03'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-13808'
references:
  - url: >-
      https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md
    label: cna@vuldb.com
  - url: >-
      https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.333818'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.333818'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.692068'
    label: cna@vuldb.com
  - url: >-
      https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00479
epssPercentile: 0.38668
ingestedAt: '2026-09-03T03:55:23.181Z'
---

## Overview

A flaw has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this vulnerability is the function update of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/UserController.java of the component User Profile Handler. This manipulation of the argument ID causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `orion-ops <= 2025-08-01`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.