cbcvebase.
CVE-2025-30001
published 2025-10-10

CVE-2025-30001: Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are…

PriorityP345high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EPSS
0.52%
40.5th percentile
Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Affected

2 ranges
VendorProductVersion rangeFixed in
apachestreampark>= 2.1.4 < 2.1.62.1.6
apache_software_foundationapache_streampark>= 2.1.4 < 2.1.62.1.6
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.