CVE-2025-64185

The record

Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, Open OnDemand packages create world writable locations in the GEM_PATH. Open OnDemand versions 4.0.8 and 3.1.16 have been patched for this vulnerability.

Affected packages

Related vulnerabilities

• CVE-2026-7891 The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended data… CWE-277
• GHSA-q3jj-46pq-826r OpenClaw's ACP child sessions inherit subagent security envelope constraints CWE-277
• CVE-2026-30266 Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a… CWE-277
• CVE-2026-20630 A permissions issue was addressed with additional restrictions. CWE-277
• CVE-2025-32092 Insecure inherited permissions for some Intel(R) Graphics Software before version… CWE-277
• CVE-2025-65111 SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can… CWE-277
• CVE-2025-24327 Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application… CWE-277
• CVE-2026-75164 An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie… CWE-552