CVE-2025-55077: Tyler Technologies ERP Pro 9 SaaS application escape

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-07 · updated 2026-06-17
Weakness: CWE-250

Description

Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment settings to all ERP Pro 9 SaaS customer environments as of 2025-08-01.

Affected products

Tyler Technologies ERP Pro 9 SaaS: 2025-08-01

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-219-01.json
https://www.cve.org/CVERecord?id=CVE-2025-55077

Get alerted when CVE-2025-55077 or the next vulnerability affects your stack