CVE-2025-64185
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Open OnDemand, an HPC portal, in versions prior to 4.0.8 and 3.1.16 creates world-writable locations in the GEM_PATH, potentially allowing unauthorized modifications.
Risk Assessment
This could enable an attacker to modify or add malicious Ruby libraries, leading to code execution in the context of other users.
Recommendation
Update Open OnDemand to version 4.0.8 or 3.1.16 (or later) to fix the vulnerability.
Other vulnerabilities in Open OnDemand
See all- CVE-2026-44371Medium
Open OnDemand (an HPC portal) before versions 4.0.11, 4.1.5, and 4.2.2 allows specially crafted filenames to execute JavaScript in the file browser. Fixed in 4.0.11, 4.1.5, and 4.2.2.
- CVE-2025-62724Medium
Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, users can craft a Time of Check to Time of Use (TOCTOU) attack when downloading zip files to access files outside of the OOD_ALLOWLIST. Files accessed are still protected by UNIX permissions.
Original NVD description (English source)
Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, Open OnDemand packages create world writable locations in the GEM_PATH. Open OnDemand versions 4.0.8 and 3.1.16 have been patched for this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS