Home One Identity CVE-2025-27582
Back to One Identity

CVE-2025-27582

One Identity Password Manager - Secure Password extension

One Identity CVSS 7.6 Updated March 12, 2026

Executive Risk Summary

"A local privilege escalation vulnerability exists in the Secure Password extension of One Identity Password Manager, allowing an attacker to gain SYSTEM-level privileges by exploiting a flawed security hardening mechanism. Successful exploitation can grant full control over the affected device, enabling an attacker to perform malicious actions with elevated privileges."

Operational Audit Arsenal

Target Type Executable
Target Asset print dialog executable (not explicitly specified)
Standard Path %windir%\System32
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: print dialog executable (not explicitly specified) (Executable)
$Targets = 'print dialog executable (not explicitly specified)'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Password Self-Service site and print functionality

Internal Work Notes

Local privilege escalation vulnerability in One Identity Password Manager's Secure Password extension, requiring update to version 5.14.4 or later to mitigate

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related One Identity Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.