Detections
Analytics
SCA: security update for github.com/neuvector/neuvector (GHSA-c8g6-qrwh-m3vp)
critical Tenable Cloud Security Plugin ID 435701
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- A vulnerability was identified in NeuVector, where the enforcer used environment variables
CLUSTER_RPC_PORT and CLUSTER_LAN_PORT to generate a command to be executed via popen, without first
sanitising their values. The entry process of the enforcer container is the monitor process. When the
enforcer container stops, the monitor process checks whether the consul subprocess has exited. To perform
this check, the monitor process uses the popen function to execute a shell command that determines whether
the ports used by the consul subprocess are still active. The values of environment variables
CLUSTER_RPC_PORT and CLUSTER_LAN_PORT are used directly to compose shell commands via popen without
validation or sanitization. This behavior could allow a malicious user to inject malicious commands
through these variables within the enforcer container. (CVE-2025-54469)
See Also
Plugin Details
Severity: Critical
ID: 435701
Version: Revision 1.13
Type: Local
Family: SCA Checks
Published: 10/22/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 94.49
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 6.7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2025-54469
CVSS v3
Risk Factor: Critical
Base Score: 9.9
Temporal Score: 8.6
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/21/2025
Vulnerability Publication Date: 10/21/2025
Reference Information
CVE: CVE-2025-54469