CVE-2025-34221 Vasion Print (formerly PrinterLogic)

Critical 10.0 Published 29 Sep 2025 Updated 15 May 2026

Unauthenticated attackers can access internal Docker containers via exposed bridge network, leading to credential theft and remote code execution.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-34221?

CVE-2025-34221 is a critical authentication bypass vulnerability in Vasion Print Application, published on 29 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to the Docker bridge network. Because no authentication, ACL or client‑side identifier is required, the attacker can interact with any internal API, bypassing the product’s authentication mechanisms entirely. The result is unauthenticated remote access to internal services, allowing credential theft, configuration manipulation and potential remote code execution. This vulnerability has been identified by the vendor as: V-2025-002 — Authentication Bypass - Docker Instances.

Weakness: CWE-306

Which versions are affected by CVE-2025-34221?

It affects 2 products.

Products include Vasion Virtual Appliance Application, Vasion Virtual Appliance Host.

How do I fix CVE-2025-34221?

No fix has been published for CVE-2025-34221 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-34221 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34221 exists.

Sources

Also known as GHSA-wcj6-872m-c4f5.