Vulnerability · Published May 14, 2026 · Assigned by CERT-PL

CVE-2025-68420Privilege Escalation in Comarch ERP Optima

High 7.5

In plain English

A high-severity security flaw in ERP Optima from Comarch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 4.0)7.5High

Exploit odds (30 days)0.1%top 98.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the client process to dump it's memory, extract credentials and use them to gain a privileged access to the database. In order to exploit this vulnerability, the client application has to be already configured, but a user does not have to be logged in. This issue has been fixed in version 2026.4

Affected products (as reported)

Vendor	Product	Versions
Comarch	ERP Optima	0 – before 2026.4

Weakness: CWE-266 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

References

https://www.comarch.pl/erp/comarch-optima/ product
https://cert.pl/posts/2026/05/CVE-2025-68420/ third-party-advisory