A code injection vulnerability using an exposed function exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI that contains a Code Interface Node (CIN). This vulnerability affects 32-bit NI LabVIEW 2025 Q1 and prior versions. LabVIEW 64-bit versions do not support CIN nodes and are not affected.
This vulnerability is identified as CVE-2025-7361.
NI strongly recommends upgrading the affected software to mitigate these vulnerabilities. Refer to the Affected Products section for information on upgrading these products.
Code Interface Nodes (CIN) are no longer supported in LabVIEW following the upgrade to LabVIEW 2025 Q3, or after the installation of the patch for versions listed below. Users should use other methods, for example a Call Library Function Nodes (CLFN), for interfacing with external code.
For backwards compatibility in existing applications, users can re-enable CIN nodes by setting EnableCodeInterfaceNodes=True in the configuration file. This should only be done if users understand the risk to their application(s).
CVE-2025-7361 – 7.8 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2025-7361 – 8.5 - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
At NI, we view the security of our products as an important part of our commitment to our customers. Go to ni.com/security to stay informed and act upon security alerts and issues.
| Product Version | Mitigation |
|---|---|
| LabVIEW 2025 | Upgrade to LabVIEW 2025 Q3 or later from NI Package Manager or Software Downloads |
| LabVIEW 2025 Q1 | LabVIEW 2025 Q1 Patch 3 – In Work |
| LabVIEW 2024 | Upgrade to LabVIEW 2024 Q3 Patch 4 or later from NI Package Manager or Software Downloads |
| LabVIEW 2023 | Upgrade to LabVIEW 2023 Q3 Patch 7 or later from NI Package Manager or Software Downloads |
| LabVIEW 2022 | Upgrade to LabVIEW 2022 Q3 Patch 6 or later from NI Package Manager or Software Downloads |
| LabVIEW 2021 and prior | Not in Mainstream Support |