CVE-2025-67109

CRITICAL 10.0CVE-2025-67109 · Published 23/12/2025 · updated 05/07/2026

In short

CVE-2025-67109 is a CRITICAL (CVSS 10.0) vulnerability affecting cyclone data distribution service (eclipse).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 25.9% of all vulnerabilities.
Fix: update to 0.10.5 or later.

Package	Affected versions	Patched versions
cyclone data distribution service eclipse	`< 0.10.5`	`0.10.5`

Description

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.

References

gist.github.com/lkloliver/669e15bc7e6194133e4ee1026ce157e6 · Third Party Advisory
eclipse-cyclonedds/cyclonedds · Product
eclipse-cyclonedds/cyclonedds · Product

More vulnerabilities in cyclone data distribution service

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free