Skip to content
OpenAdvisories
High MSRC-CVE-2025-55232 1 CVE

Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Published Sep 9, 2025 · Updated Sep 25, 2025 · Revision 2

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What do customers need to do to mitigate this vulnerability?
If you are currently using HPC Pack 2019 Update 2, you need to upgrade to HPC Pack 2019 Update 3 (Build 6.3.8328) and then apply the QFE patch (Build 6.3.8352).
If you are currently using HPC Pack 2016, you must migrate to 2019 to receive a fix, as there is no in-place update from 2016 to 2019.

How could an attacker exploit the vulnerability?
An attacker who successfully exploits this vulnerability could achieve remote code execution without user interaction.

Security updates
6.3.8352 Quick Fix QFE — https://github.com/Azure/hpcpack/blob/master/CHANGELOG.md#hpc-pack-2019-update-3-qfe-kb5065994-638352---8182025

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-55232

    Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

    Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.

    Microsoft Microsoft HPC Pack 2019

Revision history

  1. #2

    Added an acknowledgement. This is an informational change only.

  2. #1

    Information published.

References