Vulnerability Spotlight: Code Execution Vulnerability in LabVIEW

Summary: Cisco Talos disclosed a code execution vulnerability in National Instruments LabVIEW, triggered when a user opens a specially crafted VI file, the proprietary format LabVIEW uses; manipulating values in the file's 'RSRC' section can cause a controlled looping condition resulting in an arbitrary null write. National Instruments declined to release a patch, stating it does not consider the issue a vulnerability, while Talos disagrees and compares it to the .NET PE loader vulnerability CVE-2007-0041, patched in MS07-040; LabVIEW 2016 version 16.0 is listed as vulnerable.
Why it matters: The vendor has declined to patch, so the fix will not arrive through an update - and many users may not know that opening a VI file carries the same risk as running an .exe. LabVIEW drives data acquisition and industrial automation, where a successful compromise can be critical to safety.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2007-0041
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026