CVE-2025-20138

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

CVE-2025-20138 Cisco IOS XR Software CLI Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

CVE-2025-20138

Cisco IOS XR Software CLI Privilege Escalation (CVE-2025-20138) affects the CLI of Cisco IOS XR; an authenticated, low-privilege attacker can craft commands to bypass argument validation and gain root-level control on the device. The issue arises from insufficient validation of user arguments pas...