CVE-2025-9067

A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.

• CWE-269

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1754.htmlVendor Advisory

Published

Oct 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9061The Wilmer Core plugin for WordPress is vulnerable to Stored…6.4
• CVE-2025-9062Authorization Bypass Through User-Controlled Key vulnerabili…7.3
• CVE-2025-9063An authentication bypass security issue exists within Factor…9.8
• CVE-2025-9064A path traversal security issue exists within FactoryTalk Vi…9.1
• CVE-2025-9065A server-side request forgery security issue exists within R…8.8
• CVE-2025-9066A security issue was discovered within FactoryTalk® ViewPoin…8.7
• CVE-2025-9068A security issue exists within the Rockwell Automation Drive…7.8
• CVE-2025-9071Erroneously using an all-zero seed for RSA-OEAP padding inst…2.3
• CVE-2025-9072Mattermost versions 10.10.x <= 10.10.1, 10.5.x <= 10.5.9, 10…5.4
• CVE-2025-9073The All in one Minifier plugin for WordPress is vulnerable t…7.5
• CVE-2025-9074A vulnerability was identified in Docker Desktop that allows…9.3
• CVE-2025-9075The ZoloBlocks plugin for WordPress is vulnerable to Stored …6.4