CVE-2025-64645High· 7.7▾ TwilightIBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.1%
Last analysed / modified upstream
IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link.
concert >= 1.0.0, < 2.2.0Upgrade past the affected range:
concert 2.2.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-1721Medium· 5.9IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVE-2025-12771High· 7.8IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking
CVE-2025-36154Medium· 6.2IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.
CVE-2026-15661Medium· 5.3IBM Concert Software Improper Output Neutralization for Logs
CVE-2026-6930Low· 3.7IBM Concert Software Risky Cryptographic Algorithm
CVE-2026-6719High· 7.5IBM Concert Software Use of Insufficiently Random Values