Remote Code Execution Vulnerability in NI Vision Builder AI

CVE-2025-2450

What is CVE-2025-2450?

A vulnerability within the NI Vision Builder AI application permits remote attackers to execute arbitrary code on affected installations. This flaw arises from improper handling of VBAI files, which enables the execution of harmful scripts without adequate user warnings. Exploitation of this vulnerability necessitates user action, such as visiting a malicious webpage or interacting with a compromised file. When successfully exploited, attackers can execute code in the context of the current user, leading to significant security risks.

References