VULNERABILITY INTELLIGENCE
CVE-2025-34499
EPSS probability0.43%
CISA KEVNot currently listed
Published2025-12-11
Last modified2026-10-14
Description
AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with high-level system permissions.
Weakness classification
- disclosure@vulncheck.com: CWE-428