Authorization Bypass Vulnerability in Optimus Software Brokerage Automation

CVE-2025-8855

What is CVE-2025-8855?

The vulnerability in Optimus Software's Brokerage Automation involves an authorization bypass through a user-controlled key, along with a flawed password recovery mechanism. This allows attackers to exploit trust in clients and manipulate registry information, resulting in unauthorized access to sensitive data. The issue affects all versions of Brokerage Automation prior to 1.1.71, necessitating immediate updates to mitigate potential risks.

References