PT-2025-41864 · Rolantis Information Technologies · Agentis

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-10228

Positive Technologies · (AI Summary)

CVSS v3.1

8.8

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rolantis Information Technologies Agentis versions prior to 4.44

Description A session fixation issue exists in Rolantis Information Technologies Agentis. This allows an attacker to set or manipulate a user's session identifier before authentication, potentially leading to session hijacking.

Recommendations Update Rolantis Information Technologies Agentis to version 4.44 or later.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2025-10228

Affected Products

Agentis

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10228 · Security Note
• https://twitter.com/CveTodo/status/1978046630357082511 · Twitter Post
• https://twitter.com/CVEnew/status/1978032040365691233 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0336 · Note
• https://twitter.com/CveFindCom/status/1978033035942494390 · Twitter Post