CVE-2025-15552

Publication date

2026-03-16 10:44:02

Family

NCSC-FI

State

PUBLISHED

Description

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.