Scworld

Critical CVE-2025-47411 Vulnerability in Apache StreamPipes Allows Admin Account Takeovers

First seen 2 Jan 2026, 18:36 UTC • Webpronews

•50.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical privilege escalation vulnerability, tracked as CVE-2025-47411, has been identified in Apache StreamPipes, affecting versions 0.69.0 through 0.97.0. This flaw allows ordinary users to manipulate JWT authentication tokens to gain admin privileges, potentially leading to complete control over admin accounts. The vulnerability stems from a faulty user identity creation mechanism.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

7 entities, 10 inferred relationships (STIX 2.1).

Technique (2)

Data Breach
Supply Chain Attack

Vulnerability (1)

CVE-2025-47411

Affected Platform (3)

Apache Kafka
Apache StreamPipes
Self-service Industrial IoT Toolbox

Tool (1)

Shodan

Relationships

Shodan exploits CVE-2025-47411
CVE-2025-47411 targets Apache Kafka
CVE-2025-47411 targets Apache StreamPipes
CVE-2025-47411 targets Self-service Industrial IoT Toolbox
Data Breach targets Apache Kafka
Data Breach targets Apache StreamPipes
Data Breach targets Self-service Industrial IoT Toolbox
Supply Chain Attack targets Apache Kafka
Supply Chain Attack targets Apache StreamPipes
Supply Chain Attack targets Self-service Industrial IoT Toolbox

Continue Reading

Critical Vulnerabilities in Oracle Coherence and Access Manager Disclosed ASD Launches Azul Malware Analysis Tool for Enhanced Cyber Defense

Critical CVE-2025-47411 Vulnerability in Apache StreamPipes Allows Admin Account Takeovers

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading