CVE-2025-34212 Vasion Print (formerly PrinterLogic) Insecure Build Pipeline

High 8.7 Published 29 Sep 2025 Updated 15 May 2026

Attackers can compromise the build pipeline via unverified images and HTTP downloads, leading to malicious firmware injection and root code execution on CI hosts.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-34212?

CVE-2025-34212 is a high-severity vulnerability in Vasion Print Application, published on 29 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extension Pack over plain HTTP without signature validation, and grants the jenkins account NOPASSWD for mount/umount. Together these allow supply chain or man-in-the-middle compromise of the build pipeline, injection of malicious firmware, and remote code execution as root on the CI host. This vulnerability has been identified by the vendor as: V-2023-007 — Supply Chain Attack.

Weakness: CWE-732, CWE-494

Which versions are affected by CVE-2025-34212?

It affects 2 products.

Products include Vasion Virtual Appliance Application, Vasion Virtual Appliance Host.

How do I fix CVE-2025-34212?

No fix has been published for CVE-2025-34212 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-34212 being exploited?

There is no known exploitation of CVE-2025-34212 in the wild and no public exploit code.

Sources

Also known as GHSA-fh96-4m6h-v3c2.