CVE-2025-34189: virtual appliance application before 20.0.1330 (exclusive); +3 more affected products

Affected technology

virtual appliance application · before 20.0.1330 (exclusive)
vasion

virtual appliance host · before 1.0.735 (exclusive)
vasion

Print Virtual Appliance Host · 0 to before 1.0.735
Vasion

Print Application · 0 to before 20.0.1330
Vasion

Description’s affected range: versions prior to 1.0.735 and Application versions prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local inter-process communication (IPC) mechanism

Component: PrinterInstallerClient local IPC service

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

Any local user can craft malicious request files that are processed by privileged daemons, leading to unauthorized actions being executed in other user sessions. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and availability impact as low; integrity impact as high.