CVE-2025-37177 Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI)

Medium 6.5 Published 13 Jan 2026 Updated 13 Jan 2026

Authenticated attackers can delete arbitrary files on ArubaOS mobility conductors via the CLI, potentially causing data loss or service disruption.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-37177?

CVE-2025-37177 is a medium-severity path traversal vulnerability in Arubanetworks Arubaos, published on 13 Jan 2026. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation of this vulnerability could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.

Weakness: CWE-552

Which versions are affected by CVE-2025-37177?

It affects 1 product.

Products include Arubanetworks Arubaos.

How do I fix CVE-2025-37177?

No fix has been published for CVE-2025-37177 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-37177 being exploited?

There is no known exploitation of CVE-2025-37177 in the wild and no public exploit code.

All Arubanetworks Arubaos vulnerabilities

Sources

Also known as GHSA-cqwj-xmch-h6q7.