CVE-2025-49844 and RASA/ARIA Clustering

Products

• CA Service Desk Manager
• CA Service Management - Service Desk Manager

Issue/Introduction

Customers who are using RASA Clustering with their Virtual Analyst deployment (Chat Bot), are vulnerable to CVE-2025-49844

Environment

CA Service Management 17.4 GA and above

Virtual Analyst with RASA Clustering

Resolution

Customers are advised to upgrade their Redis database that is used with RASA clustering to the latest versions to avoid the vulnerability.

For further information, please refer to the official Redis blog post