Vulnerability · Published Dec 10, 2025 · Assigned by VulnCheck
CVE-2025-34395Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE
High 8.7
In plain English
A high-severity path traversal in RMM from Barracuda Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.8%top 44.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution by retrieving the .NET machine keys.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Barracuda Networks | RMM | 2025.1 – before 2025.1.1 |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N