When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
However, users who run self-managed installations will need to patch up, as well.
Get Incogni at 55% off with code TECHRADARRemove your personal information from the internet with ease.
Incogni protects your onlineidentity and reduces unwanted robocalls and spam emails.
Preferred partner (What does this mean?)
The two critical severity flaws are tracked as CVE-2025-25291 and CVE-2025-25292.
This, in turn, could lead to data exfiltration, privilege escalation, and more.
They should also turn off the SAML two-factor bypass option, and should request admin approval for auto-created users.
