A vulnerability, which was classified as critical, was found in Bosch Rexroth ctrlX OS up to 1.20.1/2.6.1/3.6.2. This affects an unknown part of the component Task API Endpoint. The manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2025-48861. It is possible to initiate the attack remotely. There is no exploit available.
