CVE-2025-65118CWE-427

AVEVA Process Optimization Uncontrolled Search Path Element

Critical · published January 16, 2026

CVSS v4.0
9.3
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

🚨 An authenticated user can exploit this vulnerability to trick the Process Optimization service into loading malicious code, potentially handing over the keys to the kingdom! 🔥 Think of it like a hotel employee who can walk through a backdoor to the main vault without anyone checking their credentials—they have a special access pass that lets them bypass normal security measures. This is exactly how the privilege escalation in this vulnerability works! If exploited, an attacker could escalate their privileges to those of the OS System, gaining complete control over the Model Application Server. This means they could manipulate, steal, or erase sensitive data, drastically compromising the entire system's integrity and security. Absolutely devastating!

Put simply

Think of it like a hotel employee who can walk through a backdoor to the main vault without anyone checking their credentials—they have a special access pass that lets them bypass normal security measures. This is exactly how the privilege escalation in this vulnerability works! This vulnerability allows an authenticated user (OS Standard User) to trick the Process Optimization services into executing arbitrary code, escalating their privileges to OS System level. This breach could lead to significant unauthorized actions within the Model Application Server.

What to do

If exploited, an attacker could escalate their privileges to those of the OS System, gaining complete control over the Model Application Server. This means they could manipulate, steal, or erase sensitive data, drastically compromising the entire system's integrity and security. Absolutely devastating! To remediate this vulnerability, apply the latest patches from the vendor immediately. Ensure that proper input validation is enforced in the Process Optimization service to prevent unauthorized code execution. Regularly audit user permissions to limit access to only what's necessary for each role. You've got this! Follow these steps, and you'll be well on your way to sealing this vulnerability tight! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00252 · 15.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-01-16T00:11Z
EPSS history
Timeline
  • 16 JAN 00:11Z
    AVEVA Process Optimization Uncontrolled Search Path Element
    cvelistv5