CVE-2025-5088

Name of the Vulnerable Software and Affected Versions CVX (affected versions not specified)

Description An authenticated Redis session can be leveraged to obtain full root access to all servers within the CVX cluster. This requires the attacker to have network access to the Redis service and the corresponding Redis password. All Redis communication, including the authentication process, is transmitted in plaintext, as TLS (Transport Layer Security, a protocol that provides encrypted communication) is not currently supported.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.