CVE-2025-34204
CRITICALVasion Virtual Appliance Host and Application - Improper Privilege Management via Root-User Docker Containers
Title source: llmDescription
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached.
References (4)
Core 4
Core References
Exploit, Third Party Advisory technical-description
https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-processes-running-as-root
Vendor Advisory product
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
Vendor Advisory product
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
Third Party Advisory third-party-advisory
https://www.vulncheck.com/advisories/vasion-print-printerlogic-processes-running-as-root-inside-docker-instances
Scores
CVSS v3
9.8
EPSS
0.0063
EPSS Percentile
45.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-269
Status
published
Products (2)
vasion/virtual_appliance_application
vasion/virtual_appliance_host
Published
Sep 19, 2025
Tracked Since
Feb 18, 2026