CVE-2025-34204
Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 19, 2025
- Updated
- Nov 17, 2025
- Reserved
- Apr 15, 2025
Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
Print Virtual Appliance HostVasion |
|
Print ApplicationVasion |
|
References
- https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-processes-running-as-roottechnical-description
- https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htmproduct
- https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htmproduct
- https://www.vulncheck.com/advisories/vasion-print-printerlogic-processes-running-as-root-inside-docker-instancesthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.