CVE-2025-44015: HybridDesk Station
A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands.
We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.18 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-44015?
CVE-2025-44015 is a critical command injection vulnerability affecting HybridDesk Station.
How can I fix CVE-2025-44015?
To fix CVE-2025-44015, update HybridDesk Station to version 4.2.18 or later.
What impact does CVE-2025-44015 have on my system?
CVE-2025-44015 allows attackers with local network access to execute arbitrary commands on affected systems.
Which versions of HybridDesk Station are vulnerable to CVE-2025-44015?
All versions of HybridDesk Station prior to 4.2.18 are vulnerable to CVE-2025-44015.
How can I confirm if my HybridDesk Station is affected by CVE-2025-44015?
Check the version of your HybridDesk Station; if it is lower than 4.2.18, it is affected by CVE-2025-44015.