PT-2025-22146 · Vmware · Vcenter Server

Published 2025-05-20 · Updated 2026-05-23 · CVE-2025-41225

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vCenter Server (affected versions not specified)

Description An authenticated command-execution issue exists where a malicious actor with privileges to create or modify alarms and run script actions can execute arbitrary commands on the server. This occurs due to the failure to neutralize special elements used in operating system commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-05720

CVE-2025-41225

Affected Products

Vcenter Server

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-41225 · Security Note
• https://bdu.fstec.ru/vul/2025-05720 · Security Note
• https://twitter.com/transilienceai/status/1928432158382698675 · Twitter Post
• https://reddit.com/r/vmware/comments/1kr4vmi/vmsa20250010_vmware_esxi_vcenter_server · Reddit Post
• https://twitter.com/transilienceai/status/1929695340703199550 · Twitter Post
• https://twitter.com/CCBalert/status/1925266020152774753 · Twitter Post
• https://t.me/latest_high_impact_cve/2427 · Telegram Post
• https://twitter.com/threatcluster/status/2057997527165616550 · Twitter Post
• https://twitter.com/andersonc0d3/status/1924839603845918870 · Twitter Post
• https://twitter.com/cracbot/status/1926594157499343239 · Twitter Post
• https://twitter.com/BlackpointUS/status/1924884545196745174 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717 · Note
• https://twitter.com/CVEnew/status/1924841173652234334 · Twitter Post