Local Privilege Escalation in Tenable Agent on Windows Hosts
CVE-2025-36633

8.8HIGH

Key Information:

Vendor

Tenable

Status
Agent
Vendor
CVE Published:
13 June 2025

What is CVE-2025-36633?

A critical vulnerability in the Tenable Agent prior to version 10.8.5 on Windows systems allows non-administrative users to delete crucial local system files, effectively granting them SYSTEM privileges. This exploitation could lead to unauthorized access and manipulation of sensitive data, emphasizing the need for timely updates and robust permission controls to mitigate associated risks.

Affected Version(s)

Agent Windows 0

References

https://www.tenable.com/security/tns-2025-11

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-36633 : Local Privilege Escalation in Tenable Agent on Windows Hosts