Security Advisory
CVE-2025-13828
N/A
UNKNOWN
Vulnerability Description
SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.
ImpactA low-privileged user of the platform can install malicious code to obtain higher privileges.
Published Date
December 2, 2025
Official Source
NIST NVD Advisory