Private Information Exposure in RTI Connext Professional Core Libraries
CVE-2025-10450

6.1MEDIUM

Key Information:

Vendor

Rti

Status
Connext Professional
Vendor
CVE Published:
16 December 2025

What is CVE-2025-10450?

A vulnerability in RTI Connext Professional's core libraries permits unauthorized actors to intercept and expose private personal information by sniffing unprotected network traffic. This issue impacts specific versions of Connext Professional, particularly those starting from 7.4.0 and earlier versions as well as those between 7.2.0 and 7.3.1, necessitating immediate action to safeguard sensitive data and ensure secure communications.

Affected Version(s)

Connext Professional 7.4.0 < 7.7.0

Connext Professional 7.2.0 < 7.3.1

References

https://www.rti.com/vulnerabilities/#cve-2025-10450

CVSS V4

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.