Arbitrary File Overwrite Vulnerability in Tenable Agent for Windows
CVE-2025-36631

8.4HIGH

Key Information:

Vendor

Tenable

Status
Agent
Vendor
CVE Published:
13 June 2025

What is CVE-2025-36631?

A security flaw has been identified in Tenable Agent versions prior to 10.8.5 for Windows that allows non-administrative users to overwrite arbitrary local system files. This vulnerability can be exploited by leveraging log content, effectively granting these users the ability to execute actions with SYSTEM privileges, which poses significant security risks to the affected systems.

Affected Version(s)

Agent Windows 0

References

https://www.tenable.com/security/tns-2025-11

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-36631 : Arbitrary File Overwrite Vulnerability in Tenable Agent for Windows