CVE-2025-10228

High

Description

Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44.

SeverityHigh
CVSS8.8
Exploit probability—
ProductAgentis
PublishedOct 14, 2025
First seenOct 14, 2025
Weakness typeCWE-384CWE-384

How to fix

Update
  • Rolantis Information Technologies Agentis4.44 or later

Affected products

ProductAffected versionsFixed in
Rolantis Information Technologies Agentisv < 4.444.44

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.