Name of the Vulnerable Software and Affected Versions:

NI LabVIEW versions 2025 Q1 and prior (32-bit)

Description:

A code injection vulnerability exists in NI LabVIEW due to an improper initialization check, potentially leading to arbitrary code execution. Exploitation requires a user to open a specially crafted VI utilizing a CIN node. 64-bit versions of LabVIEW are not affected as they do not support CIN nodes.

Recommendations:

Update to a version of NI LabVIEW later than 2025 Q1 (32-bit).