Progress Software Kemp LoadMaster listapikeys Command Injection Remote Code Execution Vulnerability
Progress Software's Kemp LoadMaster contains a code execution vulnerability (CVE-2025-13447) that allows authenticated network-adjacent attackers to execute arbitrary code on affected systems. While this requires valid credentials to exploit, successful attacks could give adversaries full control over the load balancer, potentially compromising network traffic and infrastructure. Security teams should prioritize patching Kemp LoadMaster installations and review access controls to limit who can authenticate to these devices, particularly from untrusted networks.