CVE-2025-64756

🗓️ 17 Nov 2025 17:29:08Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 496 Views

Glob command line tool has a command injection in the -c option; shell executes on matched filenames, fixed in version eleven one.

Reporter	Title	Published	Views	Family All 102
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	30 Jan 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	16 Feb 202609:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Processing is vulnerable to command injection vulnerability (CVE-2025-64756)	11 Feb 202611:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules (CVE-2025-64718, CVE-2025-64756, CVE-2025-13466 & CVE-2025-65945)	22 Dec 202511:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	17 Feb 202612:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software	14 Jan 202612:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	7 Apr 202607:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is vulnerable to command injection vulnerability (CVE-2025-64756)	10 Feb 202606:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	22 Jan 202605:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	31 Mar 202612:18	–	ibm

NVD

Vulners

Node

isaacs globRange10.2.0–10.5.0node.js

isaacs globRange11.0.0–11.1.0node.js

[
  {
    "vendor": "isaacs",
    "product": "node-glob",
    "versions": [
      {
        "version": ">= 10.2.0, < 10.5.0",
        "status": "affected"
      },
      {
        "version": ">= 11.0.0, < 11.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f
github	www.github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
github	www.github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146

02 Dec 2025 19:34Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00025

SSVC

CWE-78