CVE-2025-54100CWE-77command-injection

CVE-2025-54100

High · published December 9, 2025

CVSS v3.1
7.8
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

⚡ An unauthorized attacker can execute local code with just a crafted command! This command injection vulnerability in Windows PowerShell is absolutely alarming. 🔥 Think of PowerShell as a highly skilled chef in a restaurant kitchen. If someone sneaks in and slips a rogue recipe into the mix, they could whip up something truly disastrous—without the chef ever knowing! With this vulnerability, an attacker could gain local access to the system and execute arbitrary commands, potentially leading to data breaches, system compromise, or even total control over the machine. It's like letting a stranger into the kitchen, and they start tossing in harmful ingredients. That's a recipe for disaster!

Put simply

Think of PowerShell as a highly skilled chef in a restaurant kitchen. If someone sneaks in and slips a rogue recipe into the mix, they could whip up something truly disastrous—without the chef ever knowing! This command injection flaw arises from improper neutralization of special elements, enabling unauthorized users to execute commands in the PowerShell environment as if they were legitimate users.

What to do

With this vulnerability, an attacker could gain local access to the system and execute arbitrary commands, potentially leading to data breaches, system compromise, or even total control over the machine. It's like letting a stranger into the kitchen, and they start tossing in harmful ingredients. That's a recipe for disaster! To protect your systems, ensure you update to the latest PowerShell version as soon as it's available. Additionally, review your security policies to limit access to PowerShell and refine command execution permissions. Regular audits can also help catch any suspicious command usage! This is fixable! Follow these steps and you'll be on your way to securing your systems in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02234 · 82.6th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2025-12-09T23:15Z
Affected products (19)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.868810.0.14393.8688
microsoft/windows_10_1607< 10.0.14393.868810.0.14393.8688
microsoft/windows_10_1809< 10.0.17763.814610.0.17763.8146
microsoft/windows_10_1809< 10.0.17763.814610.0.17763.8146
microsoft/windows_10_21h2< 10.0.19044.669110.0.19044.6691
microsoft/windows_10_22h2< 10.0.19045.669110.0.19045.6691
microsoft/windows_11_23h2< 10.0.22631.634510.0.22631.6345
microsoft/windows_11_24h2< 10.0.26100.745610.0.26100.7456
microsoft/windows_11_25h2< 10.0.26200.745610.0.26200.7456
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016< 10.0.14393.868810.0.14393.8688
microsoft/windows_server_2019< 10.0.17763.814610.0.17763.8146
microsoft/windows_server_2022< 10.0.20348.452910.0.20348.4529
microsoft/windows_server_2022_23h2< 10.0.25398.202510.0.25398.2025
microsoft/windows_server_2025< 10.0.26100.745610.0.26100.7456
References (3)
EPSS history
Timeline
  • 09 DEC 17:56Z
    PowerShell Remote Code Execution Vulnerability
    cvelistv5