CVE-2025-1137 HIGH

CVE-2025-1137: IBM Storage Scale command injection

Vendor Ibm

Product Storage Scale

Weakness CWE-250

Published May 10, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization.

Key dates

02Disclosure timeline

May 10, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1137 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/250.html

Related vulnerabilities

Identifiers

CVE CVE-2025-1137

CWE CWE-250

CVSS 7.5 / HIGH

Affected versions

Vendor Ibm

Product Storage Scale

Affected 5.2.2.0

Vendor Ibm

Product Storage Scale

Affected 5.2.2.1

CVE-2025-1137: IBM Storage Scale command injection

01Description

02Disclosure timeline

03References

04Related CVE