CVE-2025-54469 | SUSE neuvector up to 5.3.4/5.4.6 popen CLUSTER_RPC_PORT/CLUSTER_LAN_PORT os command injection (GHSA-c8g6-qrwh-m3vp)

October 30, 2025 Yanac

A vulnerability labeled as critical has been found in SUSE neuvector up to 5.3.4/5.4.6. This vulnerability affects the function popen. The manipulation of the argument CLUSTER_RPC_PORT/CLUSTER_LAN_PORT results in os command injection.

This vulnerability is cataloged as CVE-2025-54469. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More