CVE-2025-34204: Vasion Virtual Appliance Application

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached.

Affected products

• Vasion Virtual Appliance Application: affected versions not specified
• Vasion Virtual Appliance Host: affected versions not specified

Published 2025-09-19. Last modified 2026-06-17.