CVE-2025-27153: Pluginsglpi Escalade

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper access control vulnerability. This can lead to data exposure and workflow disruptions. This issue has been patched in version 2.9.11.

Affected products

• Pluginsglpi Escalade: before 2.9.11 (fixed in 2.9.11)

Published 2025-07-01. Last modified 2026-06-17.