CVE-2025-55115 in Control-M

Résumé

par MITRE • 16/09/2025

A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability was fixed in 9.0.20.100 and above.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Airbus
• Réserver: 07/08/2025
• Divulgation: 16/09/2025
• Modérer: accepté
• Entrée: VDB-324458
• CPE: prêt
• CWE: CWE-23 (confirmé)
• CVSS: 8.8 (CNA)
• EPSS: 0.00161
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-55115
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-55115
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-55115/