Improper Access Restriction in Bitdefender Endpoint Security Tools for Mac

CVE-2025-5317

What is CVE-2025-5317?

The vulnerability pertains to improper access restrictions in Bitdefender Endpoint Security Tools for Mac prior to version 7.20.52.200087. This flaw enables local users with administrative privileges to circumvent configured uninstall password protections. Specifically, unauthorized users possessing sudo privileges can manually delete the application directory located at /Applications/Endpoint Security for Mac.app/ and associated directories under /Library/Bitdefender/AVP without the necessity of entering an uninstall password. This could lead to unauthorized removal of crucial security software, further jeopardizing system integrity.

References