CVE-2025-15399 is a Cross-Site Request Forgery (CSRF) vulnerability in IBM Common Licensing Agent and ART versions 9.0, 9.0.0.1, and 9.0.0.2. An attacker can exploit this vulnerability by crafting malicious requests that are executed with the privileges of an authenticated user, potentially leading to unauthorized actions on the system. The vulnerability is rated critical with a CVSS 3.1 base score of 10.0, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation of this CSRF vulnerability could allow an attacker to perform unauthorized and potentially malicious actions on the IBM Common Licensing system with the privileges of a trusted user. This could lead to full compromise of the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, users should consider implementing CSRF protections such as validating anti-CSRF tokens, restricting access to trusted users, and monitoring for suspicious activity related to the IBM Common Licensing system.