What’s Vulnerable › Vulnerabilities

CVE-2025-34204: Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-19 · updated 2026-10-18
• Weakness: CWE-269

Description

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise when a container is breached.

Affected products

• Vasion Virtual Appliance Application: all versions
• Vasion Virtual Appliance Host: all versions

References

• https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
• https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
• https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-processes-running-as-root
• https://www.vulncheck.com/advisories/vasion-print-printerlogic-processes-running-as-root-inside-docker-instances

Get alerted when CVE-2025-34204 or the next vulnerability affects your stack