Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-64391

Quick assessment

Affected
Veeam Agent for Windows
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

这段漏洞的描述信息翻译如下： Veeam Agent for Microsoft Windows 中存在一个漏洞，允许低权限的本地用户在管理员安装该代理程序时，将其写入任意位置的文件。 为了更清晰地理解，可以稍微拆解一下关键点： 受影响软件：Veeam Agent for Microsoft Windows。 攻击前提：管理员需要安装该代理程序。 攻击者权限：低权限的本地用户（Low-privileged local user）。 攻击效果：能够迫使代理程序将文件写入系统上的任意位置（Arbitrary locat

CVSS 4.1 · Medium

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-64391

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1386
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Veeam Agent for Windows 0 ~ 13.1 -

II. Public POCs for CVE-2025-64391

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-64391

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-64391 (1)

Same Patch Batch · Veeam · 2026-10-07 · 6 CVEs total

CVE-2025-64393 9.4 CRITICAL Veeam Backup & Replication 备份查看器任意代码执行漏洞
CVE-2026-58069 8.3 HIGH Veeam Backup & Replication 云租户任意文件读取漏洞
CVE-2026-58068 6.8 MEDIUM Veeam Agent for Windows 本地用户进程终止漏洞
CVE-2026-93026 6.1 MEDIUM Veeam Backup & Replication备份查看器修改主键漏洞
CVE-2025-64392 4.8 MEDIUM Veeam Backup Enterprise Manager 跨站脚本漏洞

IV. Related Vulnerabilities

Same product: Agent for Windows
Same vendor: Veeam
Same weakness: CWE-1386

V. Comments for CVE-2025-64391

No comments yet

Leave a comment