CVE-2025-39552

Name of the Vulnerable Software and Affected Versions Zephyr Project Manager versions n/a through 3.3.200

Description The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels.

Recommendations For versions n/a through 3.3.200, update to a version that includes the necessary security patches to fix the Missing Authorization vulnerability. As a temporary workaround, consider restricting access to sensitive areas of the Zephyr Project Manager to minimize the risk of exploitation.