CVE-2025-67794

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and files created by the agent are created with overly permissive ACLs, allowing local users without administrator rights to trigger actions or destabilize the agent.

CVSS 3.1

6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

EPSS

0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-25)

CWE

CWE-732

Published

2025-12-17

Modified

2026-10-13

Record from

the NVD, synced 2026-10-19

Affected

• drivelock:drivelock

References

• https://drivelock.help/sb/Content/SecurityBulletins/25-009-AgIncPermissions.htm

Check your stackJSON