Is Nprinting affected by CVE-2025-32433

[qliktime]

Hi,

a customer IT threat scan flagged an Nprinting installation, more specifically the Erlang executables.

Related to https://nvd.nist.gov/vuln/detail/CVE-2025-32433

I'm urgently looking for an official post explaining if Nprinting is affected by this vulnerability or not?

[Frank_S · Accepted solution]

Hello @qliktime 

Please review the following and proceed accordingly.

Qlik Security Vulnerability Policy - Qlik Community - 1713629

A Qlik Support case will need to be started directly with our Qlik Support desk.

Opening a Case

Create Case in Case Portal

Transcript: Opening a Support Case from the Qlik C... - Qlik Community - 1840694

Kind regards...

[Lech_Miszkiewicz]

Hi @qliktime 

We dont know what version of NPrinting your client has. You can always relate to documentation to see what Erlang version is installed and make your educated decision. So if you compare that with the link you sent re volnurabilities you should know what to do.

https://help.qlik.com/en-US/nprinting/February2025/Content/NPrinting/DeployingQVNprinting/System-req...

cheers

Lech

[qliktime]

I help multiple clients running different versions of Nprinting, so it was intentional to not mention exact version.
I'll file a request with support.

[Lech_Miszkiewicz]

Hi @qliktime 

you sort of missed my point. You said that “customers IT thread scan flagged it….” If thats the case you should check the version with that customer and if it is not upgraded to the latest available plan for upgrade. 
As i have shown you on my screenshots the latest version should not be affected hence in my opinion opening support ticket without checking the version is simply waste of your time and support time. On the other hand if it is the latest version and it still comes back as threat then we also would like to know as that threat would be different to what you posted  

cheers

[Andrea_Bertazzo · Accepted solution]

Hi,

NPrinting is not affected by that vulnerability.
Erlang is installed with NPrinting only as part of the RabbitMQ installation and RabbitMQ is not afffected by CVE-2025-32433 as you can see here:

https://www.rabbitmq.com/blog/2025/04/24/rabbitmq-is-not-affected-by-cve-2025-32433

In short, we are not affected because NPrinting does not use SSH.

Here's an offical article about this topic:
https://community.qlik.com/t5/Official-Support-Articles/Qlik-NPrinting-and-the-CVE-2025-32433-Erlang...

Opens in new window

PDF Download

Word Download

Excel Download

PowerPoint Download

Document Download

Opens in new window

PDF Download

Word Download

Excel Download

PowerPoint Download

Document Download

[Thomas6]

Hello, 

Our security team has alerted us that Erlang OTP version 25.3.2 is installed on our Qlik server. This is considered a security vulnerability, and we should upgrade to version 27.3.3 or newer. Our Qlik version is already May 2025. How can we update this software?

Thanks in advance for any help.

[Lech_Miszkiewicz]

Hi @Thomas6 

you cannot, you need to wait for next NPrinting release. 

Also, I suggest read through the answers from Qlik support guys below who explain that vulnerabilities described are not relevant as there is no use of SSH. 

cheers

[Ruggero_Piccoli]

Hi,

If with Qlik you mean Qlik NPrinting, February 2025 SR1 has Erlang 27.3.3 as documented in https://help.qlik.com/en-US/nprinting/February2025/Content/NPrinting/DeployingQVNprinting/System-req... and it is available for upgrade.

Best Regards,

Ruggero

[Thomas6]

Hello Ruggero,

thanks for your answer. With Qlik i mean our Qlik Sense Environment. On the qlik sense enterprise server we get this vulnerabilities messages. 

We have also Qlik NPrinting but on these servers we have February 2025 SR1 and the correct version of Erlang. 

The question is how to get the right version of Erlang on our Qlik sense servers or is it ok to uninstall it from them.

Thanks and best regards

Thomas