intra-mart Accel Platform IM-LogicDesigner Untrusted Data Deserialization Vulnerability Allowing Remote Code Execution

A vulnerability exists in the IM-LogicDesigner module of the intra-mart Accel Platform, specifically in versions 2017 Spring through 2025 Autumn. This vulnerability involves the insecure deserialization of untrusted data, which can be exploited to execute arbitrary code. The issue arises when a crafted file is imported by a user with administrative privileges.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the server.

Remediation

Patches have been released for all affected versions. Instructions for applying the patch can be found in the intra-mart Accel Platform Set up guide. For environments using Accel-Mart Quick or DPS for Sales Cloud, the patch has already been applied. For intra-mart Accel Platform for LGWAN, the patch will be applied during the maintenance on February 27, 2026.