CVE-2025-57788 Unauthorized API Access Risk

What is CVE-2025-57788?

CVE-2025-57788 is a medium-severity authentication bypass vulnerability in Commvault CommCell, published on 20 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk.

Weakness: CWE-259

Which versions are affected by CVE-2025-57788?

It affects 1 product.

Products include Commvault Commvault.

How do I fix CVE-2025-57788?

No fix has been published for CVE-2025-57788 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-57788 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-57788 exists.

Public exploit code: 1 Metasploit module and 1 Nuclei template.

Other vulnerabilities in Commvault CommCell

• CVE-2025-34028 Commvault Command Center Path Traversal Exploited Critical 9.3
• CVE-2025-3928 Commvault Web Server Unspecified Exploited High 8.7
• CVE-2017-18044 Command injection in n/a Critical 9.8
• CVE-2026-77089 Command Center API Authentication Bypass Critical 9.3
• CVE-2026-13737 Command Restriction Bypass Critical 9.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-w78r-f8w4-qxcq.