CVE-2026-6902

A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

CVSS 4.0

7.7CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

EPSS

0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-25)

CWE

CWE-94

Published

2026-05-18

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

References

• https://portal.perforce.com/s/cve/a91Qi000002zJB3IAM/code-injection-in-perforce-helix-core

Check your stackJSON