VULNERABILITY INTELLIGENCE

CVE-2025-2622

CVSS score8.8 HIGH

EPSS probability0.74%

CISA KEVNot currently listed

Published2025-03-22

Last modified2026-06-17

Description

A vulnerability was found in aizuda snail-job 1.4.0. It has been classified as critical. Affected is the function getRuntime of the file /snail-job/workflow/check-node-expression of the component Workflow-Task Management Module. The manipulation of the argument nodeExpression leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.