MFA Bypass Vulnerability in DataMosaix™ Private Cloud by Rockwell Automation

CVE-2025-11084

What is CVE-2025-11084?

A security flaw has been identified in the DataMosaix™ Private Cloud platform that permits attackers to bypass Multi-Factor Authentication (MFA) during the initial setup phase. This vulnerability arises when MFA is enabled but is not finalized within a specified 7-day period, enabling unauthorized individuals to acquire a valid login-token cookie without needing the user's password. This significant security issue emphasizes the importance of completing MFA setups promptly to mitigate potential risks.

References