Command Injection Vulnerability in Tyler Technologies ERP Pro 9 SaaS

CVE-2025-55077

What is CVE-2025-55077?

An authenticated user of Tyler Technologies ERP Pro 9 SaaS can exploit a command injection vulnerability that allows them to escape the application and execute restricted operating system commands within the remote Microsoft Windows environment. This issue provides attackers with the ability to execute commands with the privileges of the authenticated user. In response, Tyler Technologies implemented hardened remote Windows environment settings to safeguard all customer environments starting from August 1, 2025.

References