Improper Access Restriction in Bitdefender Endpoint Security Tools for Mac
CVE-2025-5317

6.8MEDIUM

Key Information:

Vendor

Bitdefender

Status
Endpoint Security Tools For Mac
Vendor
CVE Published:
11 November 2025

What is CVE-2025-5317?

The vulnerability pertains to improper access restrictions in Bitdefender Endpoint Security Tools for Mac prior to version 7.20.52.200087. This flaw enables local users with administrative privileges to circumvent configured uninstall password protections. Specifically, unauthorized users possessing sudo privileges can manually delete the application directory located at /Applications/Endpoint Security for Mac.app/ and associated directories under /Library/Bitdefender/AVP without the necessity of entering an uninstall password. This could lead to unauthorized removal of crucial security software, further jeopardizing system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Endpoint Security Tools for Mac MacOS 0 < 7.20.52.200087

References

https://www.bitdefender.com/support/security-advisories/i...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.