CVE-2025-2622
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 22, 2025
Updated: Mar 26, 2025
CWE ID 502
CWE ID 20
Summary
CVE-2025-2622 is a critical vulnerability affecting the getRuntime function in the Workflow-Task Management Module's check-node-expression file of aizuda snail-job 1.4.0. The issue arises from deserialization due to the manipulation of the nodeExpression argument. An attacker can exploit this remotely, making it a significant security risk. The vulnerability has been publicly disclosed, increasing the threat potential.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Snail-Job