Unquoted Search Path Vulnerability in Seagate Toolkit for Windows

CVE-2025-9043

What is CVE-2025-9043?

The Seagate Toolkit for Windows prior to version 2.34.0.33 is susceptible to an unquoted search path vulnerability. This flaw allows an attacker with Admin privileges to exploit the executable path of the service. By placing a malicious Program.exe file in a writable directory, the attacker could trigger the execution of the file with SYSTEM privileges, enabling unauthorized control over the affected system.

References