CVE-2025-41078
High
Description
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the generation and signing of documents.
SeverityHigh
CVSS8.1
Exploit probability—
ProductViafirma Documents
PublishedJan 12, 2026
First seenJan 12, 2026
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- viafirma documents3.7.139 or later
- viafirma documents_compose1.9.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viafirma documents | v < 3.7.139 | 3.7.139 |
| viafirma documents_compose | v < 1.9.2 | 1.9.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.