Exploitation Summary
CVE-2025-27134 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint `PATCH /api/users/:id` to set the `is_admin` field to 1. The vulnerability allows malicious low-privileged users to perform administrative actions without proper authorization. This issue has been patched in version 3.3.3.
Nuclei Templates (1)
Joplin 3.3.3 Server - Privilege Escalation
HIGHVERIFIEDby zonia3000
Shodan:
title:"Joplin Server"
References (2)
Core 2
Core References
Exploit, Vendor Advisory x_refsource_confirm
https://github.com/laurent22/joplin/security/advisories/GHSA-xj67-649m-3p8x
Scores
CVSS v3
8.8
EPSS
0.0170
EPSS Percentile
74.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-284
Status
published
Products (1)
joplin_project/joplin
< 3.3.3
Published
Apr 30, 2025
Tracked Since
Feb 18, 2026