Wormable describes a vulnerability that can spread from one vulnerable system to another automatically, often with no user interaction. In practice, this means an attacker may be able to trigger infection across exposed hosts once a single machine is compromised or reachable on the network.
This matters because wormable flaws can turn a local security problem into a fast-moving outbreak. Defenders treat them as high priority, especially in internet-facing services, remote management components, and other network-heavy code paths. In real attacks, wormable bugs are often paired with scanning and self-propagation logic, so patching and isolation need to happen quickly. Protection usually includes rapid updates, network segmentation, limiting exposure of vulnerable services, and blocking unnecessary inbound access. A vendor may label an issue wormable even when the exact spread mechanism differs from a classic worm; the warning still signals elevated risk of rapid, automated propagation.