Insecure Permissions in Vasion Print Application Affecting Multiple Deployment Types

CVE-2025-34206

What is CVE-2025-34206?

The Vasion Print application exposes sensitive configuration and secret material with overly-permissive filesystem permissions across Docker containers. This vulnerability affects both the Virtual Appliance Host and software as a service (SaaS) deployments. Specifically, critical files such as secrets.env, GPG-encrypted blobs, MySQL client keys, and application session files are publicly accessible, allowing an unauthorized attacker controlling any container to read or modify these artifacts. This can lead to significant security breaches, including credential theft, exploitation through a compromised APP_KEY, potential Portainer takeover, and overall system compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References