CVE-2025-8074

MEDIUM

Synology BeeDrive < 1.4.3-13973 - Arbitrary File Write via Origin Validation Error

Title source: llm
STIX 2.1

Description

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.

References (1)

Core 1
Core References

Scores

CVSS v3 5.6
EPSS 0.0008
EPSS Percentile 0.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-346
Status published
Products (1)
synology/beedrive < 1.4.3-13973
Published Dec 04, 2025
Tracked Since Feb 18, 2026