CVE-2025-45378 Command injection in CloudLink

Critical 9.1 Published 5 Nov 2025 Updated 26 Feb 2026

Privileged users can escape restricted shells to gain full system access, requiring SSH enabled with web credentials.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-45378?

CVE-2025-45378 is a critical command injection vulnerability in Dell CloudLink, published on 5 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system.

If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.

Weakness: CWE-78

Which versions are affected by CVE-2025-45378?

It affects 1 product.

Products include Dell Cloudlink.

How do I fix CVE-2025-45378?

No fix has been published for CVE-2025-45378 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2025-45378 being exploited?

There is no known exploitation of CVE-2025-45378 in the wild and no public exploit code.

Sources

Also known as GHSA-79m5-m533-xq7v.