CVE-2025-27134: high-severity vulnerability in laurent22 joplin
Privilege escalation in Joplin server via user patch endpoint
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
36Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 8.8epss 2.3%
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint `PATCH /api/users/:id` to set the `is_admin` field to 1. The vulnerability allows malicious low-privileged users to perform administrative actions without proper authorization. This issue has been patched in version 3.3.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
laurent22 · joplinRelated CVEs — laurent22 joplin
In the same product, most dangerous first.
CVE-2024-49362HIGHRemote Code Execution on click of <a> Link in markdown previewEPSS 1.1%CVE-2023-45673HIGHArbitrary code execution on click of PDF links in JoplinEPSS 1.0%CVE-2024-40643CRITICALJoplin has a parsing error leading to Cross-site Scripting (XSS)EPSS 0.8%CVE-2024-53268HIGHLack of validation on openExternal allows 1 click remote code execution in joplinEPSS 0.8%CVE-2025-27409HIGHJoplin Server Vulnerable to Path TraversalEPSS 0.7%CVE-2025-24028HIGHCross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in JoplinEPSS 0.5%