PT-2025-35111 · Neuvector · Neuvector

Pietro Dellamore · CVE-2025-54467 · Published 2025-08-28 · Updated 2026-07-30

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NeuVector versions prior to 5.4.6

Description: NeuVector process handling can lead to the leakage of sensitive arguments, such as passwords, within security event logs. The software uses regular expressions to detect and redact sensitive data from process commands, but the default regex may be insufficient. While custom regex patterns can be defined, a large number of patterns can negatively impact NeuVector enforcer performance due to increased backtracking.

Recommendations: NeuVector versions prior to 5.4.6: Upgrade to version 5.4.6 or later to resolve this issue.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-549

CWE-522

Related Identifiers

CVE-2025-54467

GHSA-W54X-XFXG-4GXQ

GO-2025-3919

OPENSUSE-SU-2025:15538-1

OPENSUSE-SU-2026:21483-1

SUSE-SU-2025:03289-1

Affected Products

Neuvector

References · 1750

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54467.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-54467 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03289-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15538-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54467 · Security Note
• https://osv.dev/vulnerability/GO-2025-3919 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w54x-xfxg-4gxq · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21483-1 · Vendor Advisory
• https://github.com/neuvector/neuvector/security/advisories/GHSA-w54x-xfxg-4gxq · Note
• https://github.com/neuvector/neuvector/commit/f9ddbdf420319cede3c490c1de03f48d953896ae · Note
• https://github.com/neuvector/neuvector · Note
• https://suse.com/security/cve/CVE-2025-65797 · Note
• https://suse.com/security/cve/CVE-2026-44427 · Note
• https://suse.com/security/cve/CVE-2026-27589 · Note
• https://suse.com/security/cve/CVE-2026-7736 · Note