Local File Write Vulnerability in Veeam Agent for Microsoft Windows

CVE-2025-64391

What is CVE-2025-64391?

The vulnerability allows low-privileged local users to exploit the Veeam Agent for Microsoft Windows by making it write files to arbitrary locations on the system. This could lead to unauthorized access or manipulation of files, potentially compromising the integrity of the system. The issue arises when the agent is installed by an administrator, creating a scenario where the absence of proper access controls can be exploited. Affected users and organizations should consider implementing immediate measures to secure their installations.

References