CVE-2025-57791 Argument Injection Vulnerability in CommServe
MediumCVSS 6.9
EPSS 38.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low privilege role.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Commvault CommCell | >= 11.32.0, <= 11.32.101 | No fix listed |
| Commvault CommCell | >= 11.36.0, <= 11.36.59 | No fix listed |
| commvault | < 11.36.60 | 11.36.60 |
References
- documentation.commvault.com vendor-advisory