Description

Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions. The validator uses an insecure checksum algorithm; knowing this algorithm and the format of the license lines, an attacker can recalculate the checksum and generate a valid license to grant themselves full privileges without credentials or access to the source code, allowing them unrestricted access to GAMS's mathematical models and commercial solvers.

INFO

Published Date :

2025-12-02T13:22:23.415Z

Last Modified :

2025-12-02T14:24:21.854Z

Source :

INCIBE
AFFECTED PRODUCTS

The following products are affected by CVE-2025-41086 vulnerability.

Vendors Products
Ams Development Corp.
  • Gams
Gams
  • Gams
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-41086.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact