Incorrect File Handling Permission in N-central Windows Agent and Probe
CVE-2025-10231

7HIGH

Key Information:

Vendor

N-able

Status
N-central
Vendor
CVE Published:
10 September 2025

What is CVE-2025-10231?

A vulnerability in the N-central Windows Agent and Probe allows local low-level users to exploit incorrect file handling permissions. Under specific conditions, this can enable unauthorized execution of commands with elevated privileges, potentially compromising the system's integrity.

Affected Version(s)

N-central 0 < 2025.3

References

https://documentation.n-able.com/N-central/Release_Notes/...
release-notes
https://me.n-able.com/s/security-advisory/aArVy0000000jgH...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

WithSecure Exposure Management
.