Race Condition in Falcon Sensor for Windows by CrowdStrike

CVE-2025-42701

What is CVE-2025-42701?

A race condition vulnerability exists in CrowdStrike's Falcon sensor for Windows, enabling an attacker with prior code execution capabilities to delete arbitrary files. This issue was reported via the HackerOne bug bounty program and has been addressed in Falcon sensor for Windows versions 7.24 and newer, along with all Long Term Visibility sensors. Other Falcon sensors for Mac, Linux, and Legacy Systems are not affected. CrowdStrike's threat hunting team remains vigilant and is actively monitoring for any potential exploitation attempts.

References