Remote Code Execution Vulnerability in Dolibarr ERP & CRM by Dolibarr

CVE-2025-56588

What is CVE-2025-56588?

Dolibarr ERP & CRM versions, particularly v21.0.1, have been identified with a vulnerability that allows an attacker to execute arbitrary code remotely through the User module configuration. The flaw is exploited via the computed field parameter, which can be manipulated to compromise the integrity and security of the system. Users of affected versions are advised to apply necessary patches or updates immediately to mitigate the risk associated with this vulnerability.

References