High severity8.8NVD Advisory· Published Dec 15, 2025· Updated Apr 15, 2026

CVE-2025-9121

Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pentaho/Data Integration and Analytics Community Dashboard Editorllm-create
Range: <10.2.0.4

Patches

Vulnerability mechanics

References

support.pentaho.com/hc/en-us/articles/41832536185613--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Deserialization-of-Untrusted-Data-Versions-before-10-2-0-4-Impacted-CVE-2025-9121nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000