CVE-2025-64695

Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privilege of the user invoking the installer.

CVSS 4.0

8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.0

7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-25)

CWE

CWE-427

Published

2025-11-21

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• secuavail:logstare_collector

References

• https://jvn.jp/en/jp/JVN77560819/
• https://www.logstare.com/vulnerability/2025-001/

Check your stackJSON