CVE-2025-58435 - CVE House
Back to Database
Status published Medium CVE-2025-58435

Open OnDemand didn't rotate password for VNC batch_connect

Vulnerability Description

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop session and the other user would need to be authenticated to the portal. But obtaining the link would allow that user to perform any actions as the original user and access their data. Open OnDemand 3.1.15 and 4.0.7 have patched this vulnerability and correctly rotate passwords for any version of TurboVNC. As a workaround, downgrade TurboVNC to a version lower than 3.1.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58435

Credits & Attribution

No credits recorded in the NVD database.

References

More from OSC

View All →
CVE-2025-66029
Open OnDemand affected by Apache proxy passing sensitive headers
High 7.6
CVE-2025-64185
Open OnDemand RPM packages create world writable locations
Medium 6.9
CVE-2025-62724
Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)
Medium 4.3
CVE-2025-53636
Open OnDemand Shell App closed websocket DoS
Medium 5.4

Affected Vendor

Affected Software

ondemand
Vulnerable Versions:
< 3.1.15, >= 4.0.0-0.rc1, < 4.0.7

Timeline

Official Publish: September 9th, 2025
Last Modified: September 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-262

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.