Authenticated Command-Execution Vulnerability in vCenter Server by Broadcom

CVE-2025-41225

What is CVE-2025-41225?

The vCenter Server, developed by Broadcom, is susceptible to an authenticated command-execution vulnerability. This vulnerability allows an authorized user with permissions to create or modify alarms and execute script actions to potentially run arbitrary commands on the vCenter Server. If exploited, this could permit malicious actors to manipulate server functions or extract sensitive data, making it crucial for organizations to address this security issue promptly.

References