PT-2025-31581 · Rsa · Rsa Archer

Horooq-Hummdi + 1 · Published 2025-07-30 · Updated 2026-01-12 · CVE-2025-50572

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RSA Archer version 6.11.00204.10014

Description An issue was discovered that allows attackers to execute arbitrary code via crafted system inputs. These inputs are exported into a CSV file, and execution occurs after a user opens the file with compatible applications.

Recommendations Ensure that CSV files exported from RSA Archer are not opened with applications that automatically execute commands or scripts.

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

BDU:2026-02084

CVE-2025-50572

Affected Products

Rsa Archer

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-50572 · Security Note
• https://bdu.fstec.ru/vul/2026-02084 · Security Note
• https://t.me/CVEtracker/28896 · Telegram Post
• https://github.com/shorooq-hummdi/Archer-csv-injection-command-exec/blob/main/README.md · Note
• https://t.me/cveNotify/148393 · Telegram Post
• http://archer.com · Note
• https://archerirm.community/s/blogs/formula-injection-into-csv-files-vulnerability-in-rsa-archer-6-1-x-and-higher-MCOCQFO3WCQBCCHMKNC74JGSFWQY · Note
• http://rsa.com · Note
• https://t.me/cveNotify/130792 · Telegram Post
• https://twitter.com/CVEnew/status/1951003201706311713 · Twitter Post
• https://rsa.com/company · Note