Remote Code Execution Vulnerability in NI Vision Builder AI
CVE-2025-2450

8.8HIGH

Key Information:

Vendor

Ni

Status
Vision Builder Ai
Vendor
CVE Published:
18 March 2025

What is CVE-2025-2450?

A vulnerability within the NI Vision Builder AI application permits remote attackers to execute arbitrary code on affected installations. This flaw arises from improper handling of VBAI files, which enables the execution of harmful scripts without adequate user warnings. Exploitation of this vulnerability necessitates user action, such as visiting a malicious webpage or interacting with a compromised file. When successfully exploited, attackers can execute code in the context of the current user, leading to significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Vision Builder AI 2023 Q3

References

https://www.zerodayinitiative.com/advisories/ZDI-25-147/
x_research-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.