CVE-2025-37174 Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface

High 7.2 Published 13 Jan 2026 Updated 26 Feb 2026

Authenticated attackers can write arbitrary files and execute commands as privileged users on ArubaOS devices via the web management interface.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-37174?

CVE-2025-37174 is a high-severity path traversal vulnerability in Arubanetworks Arubaos, published on 13 Jan 2026. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system.

Weakness: CWE-277

Which versions are affected by CVE-2025-37174?

It affects 1 product.

Products include Arubanetworks Arubaos.

How do I fix CVE-2025-37174?

No fix has been published for CVE-2025-37174 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-37174 being exploited?

There is no known exploitation of CVE-2025-37174 in the wild and no public exploit code.

All Arubanetworks Arubaos vulnerabilities

Sources

Also known as GHSA-h534-5rp5-qc2h.