This vulnerability allows an attacker to perform remote code execution via code injection in the Perforce P4 (Helix Core) Server's Command-Line Client. It affects versions before 2025.2 Patch 2. The CVSS 4.0 score is 7.7, indicating high severity, with network attack vector, low attack complexity, and requiring partial user interaction and privileges. The vendor has fixed this issue in the 2025.2 Patch 2 release. No cloud service is involved, and no known exploits have been reported.

Successful exploitation could allow an attacker to execute arbitrary code remotely on the affected Perforce P4 server, potentially leading to full compromise of the system. The vulnerability is rated high severity with a CVSS score of 7.7. No known active exploitation has been reported.

Apply the official fix by upgrading to Perforce P4 (Helix Core) version 2025.2 Patch 2 or later, where this vulnerability has been addressed. Since the vendor advisory does not explicitly provide patch links or remediation level, users should consult Perforce's official resources to obtain and apply the patch. No other mitigations are specified.