CVE-2025-11673

HIGH

SOOP-CLM 5.2-5.3 - Hidden Functionality Code Execution

Title source: manual

Description

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server.

References (2)

Core 2

Core References

Various Sources third-party-advisory

https://www.twcert.org.tw/tw/cp-132-10421-5cf6b-1.html

Various Sources third-party-advisory

https://www.twcert.org.tw/en/cp-139-10422-e06c3-2.html

Scores

CVSS v3 7.2

EPSS 0.0053

EPSS Percentile 40.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-912

Status published

Products (2)

PiExtract/SOOP-CLM 5.2

PiExtract/SOOP-CLM 5.3

Published Oct 13, 2025

Tracked Since Feb 18, 2026