What is CVE-2025-4971?

CVE-2025-4971 is a vulnerability in Broadcom Automic Automation, classified under Untrusted Search Path. Published 2025-05-20.

Is CVE-2025-4971 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Broadcom Automic Automation

CVE-2025-4971

Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges.

Published 2025-05-20 · last modified 2026-06-17.

EPSS exploit prediction

EPSS: 0.006 (46.2th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 46th percentile — 46.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: +0.000

Affected products

Broadcom Automic Automation — versions < 24.3.0 HF4, and < 21.0.13 HF1, 24.3.0 HF4 or later, and 21.0.13 HF1 or later

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

Frequently asked questions

What is CVE-2025-4971?: CVE-2025-4971 is a vulnerability in Broadcom Automic Automation, classified under Untrusted Search Path. Published 2025-05-20.
Is CVE-2025-4971 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.