Research · Dec 5, 2025
Critical OS Command Injection Vulnerability in Array Networks ArrayOS AG
A significant OS command injection vulnerability has been identified in Array Networks ArrayOS AG, potentially allowing attackers to execute arbitrary commands.
What changed
A newly discovered OS command injection vulnerability in Array Networks' ArrayOS AG has raised security concerns. This flaw could enable unauthorized users to execute arbitrary commands on the affected systems, posing a serious risk to the integrity and confidentiality of data.
Who is affected
The vulnerability impacts various users and organizations utilizing Array Networks products. The following groups are particularly at risk:
- Organizations using Array Networks ArrayOS AG for network management.
- IT departments relying on ArrayOS AG for application delivery and security.
- Service providers offering managed services based on Array Networks technology.
- Any enterprise that integrates ArrayOS AG into their infrastructure.
What to do
Users of Array Networks ArrayOS AG are advised to take immediate action to mitigate potential risks associated with this vulnerability. Regular updates and patches should be applied to ensure system security.
- Review and apply any security patches provided by Array Networks.
- Conduct a risk assessment to understand the potential impact of this vulnerability.
- Implement additional security measures such as network segmentation and monitoring.
- Stay informed about updates from Array Networks regarding this vulnerability.