CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by logging in to the device CLI with valid administrative (level 15) credentials and using crafted commands at the CLI prompt. A successful exploit could allow the attacker to execute arbitrary commands as root.

• CWE-141

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-arg-inject-EyDDbh4eVendor Advisory

Published

Sep 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20332A vulnerability in the web-based management interface of Cis…4.3
• CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewa…9.9
• CVE-2025-20334A vulnerability in the HTTP API subsystem of Cisco IOS XE So…8.8
• CVE-2025-20335A vulnerability in the directory permissions of Cisco Desk P…5.3
• CVE-2025-20336A vulnerability in the directory permissions of Cisco Desk P…7.5
• CVE-2025-20337A vulnerability in a specific API of Cisco ISE and Cisco ISE…10
• CVE-2025-20339A vulnerability in the access control list (ACL) processing …5.8
• CVE-2025-2034A vulnerability has been found in PHPGurukul Pre-School Enro…9.8
• CVE-2025-20340A vulnerability in the Address Resolution Protocol (ARP) imp…7.4
• CVE-2025-20341A vulnerability in Cisco Catalyst Center Virtual Appliance c…8.8
• CVE-2025-20342A vulnerability in the Virtual Keyboard Video Monitor (vKVM)…5.4
• CVE-2025-20343A vulnerability in the RADIUS setting Reject RADIUS requests…7.5