CVE-2025-50572

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2025-50572 is a vulnerability in Archer version 6.11.00204.10014 that enables attackers to execute arbitrary code through crafted system inputs. These inputs are exported into CSV files, where they can be executed when a user opens the file using compatible applications such as spreadsheet software. The issue is classified under CWE-1236 and carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H), indicating high severity due to its potential for significant confidentiality, integrity, and availability impacts. The vulnerability was published on 2025-07-31.

An unauthenticated remote attacker with network access can exploit this vulnerability with low complexity by submitting malicious inputs into the system. Exploitation requires user interaction, specifically a targeted user opening the exported CSV file in a vulnerable application. Successful exploitation allows the attacker to achieve arbitrary code execution on the victim's system, potentially leading to full compromise including data theft, malware deployment, or further lateral movement.

Advisories and references, including those from archer.com, rsa.com, a GitHub repository detailing CSV injection for command execution (github.com/shorooq-hummdi/Archer-csv-injection-command-exec), and an Archer IRM community blog on formula injection in RSA Archer 6.1.x and higher, provide technical details on the issue. Notably, the supplier does not accept this as a valid vulnerability report against their product, and no specific patches or mitigations are detailed in the available information.

In context, this appears to be a disputed CSV injection vector without confirmed real-world exploitation reports in the provided data.