Arbitrary Code Execution Vulnerability in OpenEDR by Comodo Security
CVE-2025-69784

8.8HIGH

Key Information:

Vendor

Comodo Security

Status
OpenEDR
Vendor
CVE Published:
16 March 2026

What is CVE-2025-69784?

A local, non-privileged attacker can exploit a vulnerable IOCTL interface present in OpenEDR 2.5.1.0's kernel driver. By manipulating the DLL injection path to point to a user-writable directory, this vulnerability permits the attacker to load a rogue DLL into high-privilege processes. Consequently, this opens the door to arbitrary code execution with SYSTEM privileges, posing a severe risk of full system compromise for affected installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://scavengersecurity.com/posts/edr-as-rootkit-2/
https://github.com/ComodoSecurity/openedr
https://www.openedr.com/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.