SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds