This vulnerability involves code injection in the Command-Line Client component of Perforce P4 Server (Helix Core) before version 2025.2 Patch 2. The CVSS 4.0 score of 7.7 indicates a high-severity issue with network attack vector, low attack complexity, and partial user interaction required. The vulnerability could lead to high impact on confidentiality, integrity, and availability. The vendor has addressed this vulnerability in the 2025.2 Patch 2 update.

Successful exploitation of this vulnerability could allow an unauthenticated attacker, with partial user interaction, to inject and execute arbitrary code on the affected system. This can compromise the confidentiality, integrity, and availability of the P4 Server environment. However, no known exploits have been reported in the wild so far.

Apply the official patch by upgrading to Perforce P4 Server version 2025.2 Patch 2 or later, where this vulnerability has been fixed. Since no vendor advisory link or explicit remediation level is provided, confirm patch availability and details from Perforce's official resources before deployment. Patch status is not yet confirmed in the provided data — check the vendor advisory for current remediation guidance.