VULNERABILITY INTELLIGENCE

CVE-2019-25261

CVSS score8.5 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-02-03
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attackers can exploit the unquoted binary path to place malicious files in service executable locations, potentially gaining elevated system privileges.

Weakness classification

  • CWE-428: Unquoted Search Path or Element

Primary references