CVE-2025-59714: INTERNET2 Grouper

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

Affected products

• INTERNET2 Grouper: from 5.17.1, before 5.20.5 (fixed in 5.20.5)

Published 2025-09-19. Last modified 2026-06-17.