Critical Apache StreamPipes Vulnerability Allows Attackers to Gain Admin Control

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Apache StreamPipes Vulnerability Allows Admin Control Exploitation A critical privilege escalation vulnerability, tracked as CVE-2025-47411, has been identified in Apache StreamPipes, affecting versions 0.69.0 through 0.97.0. This flaw allows unauthorized users to gain administrative access due to a defect in the user ID creation mechanism, prompting the release of a security patch to address the issue. 5 sources 45