Uncontrolled Search Path Vulnerability in LogStare Collector for Windows
CVE-2025-64695

8.4HIGH

Key Information:

Vendor

Logstare Inc.

Status
Installer Of Logstare Collector (for Windows)
Vendor
CVE Published:
21 November 2025

What is CVE-2025-64695?

An uncontrolled search path vulnerability exists in the LogStare Collector installer for Windows. This flaw allows an attacker to potentially execute arbitrary code with the privileges of the user running the installer. By manipulating the search path, malicious users can leverage this vulnerability to gain unauthorized access or control over the system during installation, making it crucial for users to ensure their software is up to date and secure from such risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Installer of LogStare Collector (for Windows) 2.4.1 and earlier

References

https://www.logstare.com/vulnerability/2025-001/
https://jvn.jp/en/jp/JVN77560819/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.