CVE-2026-6902

A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

Score

CVSS 4.0 7.7 High

Status

Awaiting Analysis - security@puppet.com

Published

2026-05-18

Last modified

2026-10-26

Weaknesses

CWE-94

Affected products

• P4 Helix Core (Perforce)

References

• https://portal.perforce.com/s/cve/a91Qi000002zJB3IAM/code-injection-in-perforce-helix-core