Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-2903

Privilege Chaining in Delphix

Description

An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious software, and disrupt or disable the functionality of the VM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Perforce Delphix

Default version status: unaffected

  • 14.0.0.0 to ≤ 2025.2.0.0affected

References