CVE-2025-56588: Dolibarr Erp/crm

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution (RCE) vulnerability in the User module configuration via the computed field parameter.

Affected products

  • Dolibarr Dolibarr Erp/crm: version 21.0.1 only

Published 2025-10-01. Last modified 2026-07-05.