CVE-2025-4582: connext professional from 4.4a (inclusive), before 6.1.2.26 (exclusive), from 7.0.0 (inclusive), before 7.3.0.8…

Affected technology

connext professional · from 4.4a (inclusive), before 6.1.2.26 (exclusive)
rti

connext professional · from 7.0.0 (inclusive), before 7.3.0.8 (exclusive)
rti

connext professional · from 7.4.0 (inclusive), before 7.6.0 (exclusive)
rti

Connext Professional · 7.4.0 to before 7.6.0, 7.0.0 to before 7.3.0.8, 6.1.0 to before 6.1.2.26, 6.0.0 to before 6.0.1.43, 5.3.0 to before 5.3.*, 5.2.0 to before 5.2.*, 4.4a to before 5.1.*
RTI

Component: Core Libraries

Attack conditions (Source advisory, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality and availability impact as low; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.