Local Privilege Escalation in 2BrightSparks SyncBackFree Software

CVE-2025-5474

What is CVE-2025-5474?

The vulnerability found in 2BrightSparks SyncBackFree involves a local privilege escalation that allows attackers to gain elevated privileges on compromised systems. Attackers must have the ability to execute low-privileged code, as well as administrative user interaction, to exploit this flaw. This vulnerability is particularly concerning due to its association with the software's Mirror functionality, which, when manipulated through the creation of a junction, can lead to unauthorized file deletions and arbitrary code execution within the context of the SYSTEM level. This poses significant security risks for users, as it may result in complete loss of control over the affected systems and potential data loss.

References