This vulnerability in RTI Connext Professional's core libraries permits unauthorized actors to intercept and access private personal information transmitted over the network. Affected versions include 7.4.0 up to but not including 7.7.0, and 7.2.0 up to but not including 7.3.1. The CVSS 4.0 base score is 8.3, reflecting a network attack vector with low attack complexity but requiring some privileges and partial user interaction. The vulnerability results in high confidentiality impact and low integrity and availability impacts. No official patch or vendor advisory is currently referenced.

Successful exploitation could lead to unauthorized disclosure of private personal information by sniffing network traffic within the affected RTI Connext Professional versions. This compromises confidentiality of sensitive data transmitted by the product. There is no indication of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to trusted parties and employing network-level encryption or segmentation to reduce exposure risk.