Command Injection Vulnerability in Reolink Desktop Application
CVE-2025-56799
6.5MEDIUM
What is CVE-2025-56799?
The Reolink desktop application version 8.18.12 is susceptible to command injection due to a flaw in its scheduled cache-clearing mechanism. This vulnerability arises when an attacker crafts a malicious folder name, potentially compromising the application's intended behavior and leading to unauthorized command execution. Although the supplier disputes the severity, as it would require local user interaction to exploit, it highlights the importance of robust input validation to mitigate security threats.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.