CVE-2025-13481

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@us.ibm.com

Published

2025-12-11

Last modified

2026-10-07

Weaknesses

CWE-78

Affected products

• Aspera Orchestrator (Ibm)

References

• https://www.ibm.com/support/pages/node/7254434