IBM AIX command execution

Description

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input.

Scores

EPSS (exploitation in 30 days)

0.22% · top 87% of all CVEs (5 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

• CWE-23 Relative Path Traversal (opens in a new tab)All about CWE-23 and its CVEs

Affected products

• IBM · AIX

  • affected 7.3

• IBM · VIOS

  • affected 4.1.1

What to do

Solution: IBM strongly recommends addressing the vulnerability now. The AIX and VIOS fixes can be downloaded via https from: https://aix.software.ibm.com/aix/efixes/security/perl_fix9.tar

References (1)

• https://www.ibm.com/support/pages/node/7236103 (opens in a new tab)vendor-advisorypatch

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2025-33112](https://trackcve.app/badge/CVE-2025-33112.svg)](https://trackcve.app/cve/CVE-2025-33112)

Record last updated 26 Feb 2026, 17:50 UTC.