CVE-2025-5459 — A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1. — CVE Database · The Intelligence Room