Logic Error in Falcon Sensor for Windows by CrowdStrike

CVE-2025-42706

What is CVE-2025-42706?

A logic error has been identified in the Falcon sensor for Windows that can be exploited by attackers with prior code execution capability to delete arbitrary files from a host system. This vulnerability affects Falcon sensor for Windows versions 7.24 and later, along with all Long Term Visibility (LTV) sensor versions. CrowdStrike has addressed this issue with a security fix to mitigate the risk of exploitation. While there is currently no evidence of real-world exploitation, CrowdStrike's threat hunting and intelligence teams are actively monitoring for any attempts. Notably, the Falcon sensors for Mac, Linux, and Legacy Systems are unaffected by this vulnerability. The issue was reported through CrowdStrike's HackerOne bug bounty program by researcher Cong Cheng.

References