Aviatrix Cloud Controller Flaw Enables Remote Code Execution via Authentication Bypass

Two critical vulnerabilities—CVE-2025-2171 and CVE-2025-2172—were discovered in Aviatrix Controller. These flaws enable full system compromise through an authentication bypass followed by command injection, affecting versions 7.2.5012.