CVE-2025-56588 is a remote code execution (RCE) vulnerability affecting Dolibarr ERP & CRM version 21.0.1. The issue exists in the User module configuration through the computed field parameter, which can be manipulated to execute arbitrary code remotely. The vulnerability is classified under CWE-94, indicating improper control over code generation. The CVSS score of 8.8 reflects a high-severity flaw exploitable over the network without privileges but requiring user interaction. No known exploits in the wild have been reported, and no patch or remediation details are currently available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system remotely. This could lead to full compromise of the Dolibarr ERP & CRM instance, including unauthorized access to sensitive data, modification or deletion of data, and disruption of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, limit exposure by restricting access to the User module configuration interface and applying standard network protections. Avoid enabling or using computed fields in the User module until a fix is available.