# Ignition affected by CVE-2023-5129?

**URL:** <https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707>\
**Category:** General Discussion\
**Created:** [September 27, 2023, 1:25pm UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707 "2023-09-27T13:25:53Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [September 27, 2023, 1:25pm UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707/1 "2023-09-27T13:25:53Z")

</div>

I know this is pretty new, but is Ignition affected by CVE-2023-5129? Looks like it was a lower score before as a different CVE but is now a 10.

[https://nvd.nist.gov/vuln/detail/CVE-2023-5129](https://nvd.nist.gov/vuln/detail/CVE-2023-5129)

Edit:  
Another link explaining a bit of history of this CVE and other software affected: [https://www.cyberkendra.com/2023/09/webp-0day-google-assign-new-cve-for.html?m=1](https://www.cyberkendra.com/2023/09/webp-0day-google-assign-new-cve-for.html?m=1)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 27, 2023, 1:29pm UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707/2 "2023-09-27T13:29:01Z")

</div>

I'll bring this up internally, but it does seem that while Ignition itself is not vulnerable, the embedded Chromium browser used in the Designer, Perspective Workstation, and Vision's web browser component may be.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 27, 2023, 5:44pm UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707/3 "2023-09-27T17:44:26Z")

</div>

Ok, we're tracking this. Not sure I'll have much of an update until next week some time because ICC is going on this week.

---

<div class="post-metadata">

**Author:** ![berni](https://avatars.discourse-cdn.com/v4/letter/b/13edae/32.png) [@berni](https://forum.inductiveautomation.com/u/berni)\
**Post date:** [July 8, 2024, 2:01pm UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707/4 "2024-07-08T14:01:52Z")

</div>

Hello,  
Do you have any update regarding the topic ?  
Thank you very much !

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 8, 2024, 2:03pm UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707/5 "2024-07-08T14:03:39Z")

</div>

The embedded version of Chromium was updated in Ignition 8.1.34.

---

<div class="post-metadata">

**Author:** ![berni](https://avatars.discourse-cdn.com/v4/letter/b/13edae/32.png) [@berni](https://forum.inductiveautomation.com/u/berni)\
**Post date:** [July 18, 2024, 9:27am UTC](https://forum.inductiveautomation.com/t/ignition-affected-by-cve-2023-5129/79707/6 "2024-07-18T09:27:22Z")

</div>

Thank you for your reply.  
Best regards,