Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Uniswap v.3.0: Unprivileged User Escalation of Privileges

CVE-2025-25962 · published 1 year ago
Summary

A bug in Uniswap version 3.0 allows an attacker to gain higher levels of access than intended. This could potentially lead to unauthorized changes to user accounts or data. Upgrade to Uniswap version 4.0 to address this issue.

Original advisory text
An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the _modifyPosition function
An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the _modifyPosition function
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-269Improper Privilege Management
CWE-284Improper Access Control
Timeline
Published29 Apr 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-25962 · NVD
Track software like this
Free during beta