CVE-2025-21092: Gmod Apollo

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others.

Affected products

• Gmod Apollo: before 2.8.0 (fixed in 2.8.0)

Published 2025-03-05. Last modified 2026-06-17.