Privilege Escalation Vulnerability in Comarch ERP Optima

CVE-2025-68420

What is CVE-2025-68420?

The Comarch ERP Optima client exhibits a security flaw where it connects to a database utilizing a high privileged account, irrespective of the user-specific application account being used for login. This flaw allows a local attacker, who has control over the client process, to dump memory contents, which may include sensitive credentials. These credentials can then be exploited to gain unauthorized privileged access to the database, posing significant risks to data integrity and security. It is essential to ensure that the client application is configured properly to mitigate these vulnerabilities, as exploitation does not require an active user login. This issue has been remediated in version 2026.4.

References