CVE-2025-64729CWE-862

AVEVA Process Optimization Missing Authorization

High · published January 16, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

⚡ An authenticated user can pull off a pretty wild stunt with this vulnerability — tampering with project files and escalating privileges without raising any alarms! 😱 Think of it like a sneaky waiter swapping out your order with something totally different when you're not looking. They might even tweak the details just enough to make you think it’s what you ordered, leading to a disaster when someone else takes a bite! If exploited, an attacker could manipulate Process Optimization project files to run malicious code, potentially allowing them to operate under the identity of another user. This could lead to unauthorized access, data breaches, and a complete compromise of user trust—absolutely devastating!

Put simply

Think of it like a sneaky waiter swapping out your order with something totally different when you're not looking. They might even tweak the details just enough to make you think it’s what you ordered, leading to a disaster when someone else takes a bite! CVE-2025-64729 allows authenticated standard users to alter project files and escalate their privileges. By embedding code into these files, attackers can impersonate other users when their files are accessed.

What to do

If exploited, an attacker could manipulate Process Optimization project files to run malicious code, potentially allowing them to operate under the identity of another user. This could lead to unauthorized access, data breaches, and a complete compromise of user trust—absolutely devastating! To mitigate this risk, it's essential to patch the vulnerability promptly, restrict file permissions to prevent unauthorized changes, and conduct a security audit of your systems. Ensure that users have the minimum permissions necessary to perform their roles. You've got this! With a proactive approach, you'll have this vulnerability locked down in no time. 🛡️

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:H
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-01-16T00:12Z
EPSS history
Timeline
  • 16 JAN 00:12Z
    AVEVA Process Optimization Missing Authorization
    cvelistv5