Incorrect Default Permissions in Radarr Service Affecting Local Environments

CVE-2025-13130

What is CVE-2025-13130?

A security issue has been identified in Radarr version 5.28.0.10274, specifically related to the Radarr.Service component. This vulnerability arises from incorrect default permissions assigned to Radarr.Console.exe located at C:\ProgramData\Radarr\bin. The flaw allows potential attackers with local access to the system to exploit these default permissions, posing a risk to the integrity of the service and users' data. Despite early notifications to the vendor regarding this vulnerability, no response has been received, emphasizing the need for immediate examination and remediation by users of this version.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References