A vulnerability described as critical has been identified in Nuvation Energy Multi-Stack Controller up to 2.5.0. The impacted element is an unknown function. The manipulation results in os command injection.

This vulnerability is identified as CVE-2025-64124. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.