CVE-2025-7972: Rockwellautomation Factorytalk Linx

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.

Affected products

• Rockwellautomation Factorytalk Linx: before 6.50 (fixed in 6.50)

Published 2025-08-14. Last modified 2026-06-17.