CVE-2025-50674: Openmediavault

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalate privileges to root.

Affected products

• Openmediavault Openmediavault: version 7.4.17 only

Published 2025-08-22. Last modified 2026-07-05.