What is GHSA-r87r-w586-7rg3?

GHSA-r87r-w586-7rg3 is a security advisory published by GitHub Security Advisories with Critical severity. An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized...

Which CVE IDs does GHSA-r87r-w586-7rg3 cover?

GHSA-r87r-w586-7rg3 covers the following CVE IDs: CVE-2025-14600. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-r87r-w586-7rg3Critical

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2025-14600 →

📋 Description

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provision a new administrative account.

Apply patch from vendor https://vsdesk.ru/ . Versions 14.0402 and on have the patch.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-14600
https://github.com/klsecservices/Advisories/blob/master/KLSA-00296-Admin-Account-Takeover-via-Path-Traversal-in-vsDesk.md
https://vsdesk.ru/news/vyshla-novaya-versiya-140422
https://github.com/advisories/GHSA-r87r-w586-7rg3