Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-4285: Rolantis Agentis: SQL Injection Through Malicious Database Queries

CVE-2025-4285 · published 1 year ago

Summary

The Rolantis Agentis software has a security flaw that allows an attacker to execute unauthorized database commands. This could allow an attacker to access or modify sensitive data. Rolantis recommends updating to version 4.32 or later to fix this issue.

Original advisory text

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolantis Information Technologies Agentis allows SQL Injection. This issue affects Agentis: be...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolantis Information Technologies Agentis allows SQL Injection.

This issue affects Agentis: before 4.32.

References

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

10.0 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

Timeline

Published22 Jul 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-4285 · NVD

Track software like this

Free during beta