The CGM CLININET application includes a cgm-updater process that listens on an open network port without requiring any authentication. This vulnerability affects versions up to 2026.MS3, with the possibility that later versions may also be vulnerable. The issue allows unauthenticated network access to the updater process, potentially enabling unauthorized actions.