CVE-2025-7073— Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
Quick assessment
Affected
Bitdefender Total Security
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Bitdefender Total Security是罗马尼亚比特梵德（Bitdefender）公司的一款应用于PC端的主动威胁防护软件。该软件具有防病毒，防火墙，反间谍软件，隐私控制，家长控制功能。还包括System TuneUp等功能。 Bitdefender Total Security 27.0.46.231版本存在后置链接漏洞，该漏洞源于符号链接验证不足，可能导致任意文件删除和权限提升。
Possible ATT&CK Techniques 3 AI
T1553 · Subvert Trust Controls T1055 · Process Injection T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-7073
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
Source: CVE Program / CVE List V5
Vulnerability Description
A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5
Vulnerability Title
Bitdefender Total Security 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bitdefender Total Security是罗马尼亚比特梵德（Bitdefender）公司的一款应用于PC端的主动威胁防护软件。该软件具有防病毒，防火墙，反间谍软件，隐私控制，家长控制功能。还包括System TuneUp等功能。 Bitdefender Total Security 27.0.46.231版本存在后置链接漏洞，该漏洞源于符号链接验证不足，可能导致任意文件删除和权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Bitdefender | Total Security | 0 ~ 27.0.47.241 | - |
|
| Bitdefender | Internet Security | 0 ~ 27.0.47.241 | - |
|
| Bitdefender | Antivirus Plus | 0 ~ 27.0.47.241 | - |
|
II. Public POCs for CVE-2025-7073
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-7073
请登录查看更多情报信息。
Other References for CVE-2025-7073 (1)
IV. Related Vulnerabilities
Same product: Total Security
-
CVE-2026-13268
G DATA Total Security Backup Service Link Following Local Pr -
CVE-2026-6851
Improper link resolution before file access in Bitdefender T -
CVE-2024-6871
G DATA Total Security Incorrect Permission Assignment Local -
CVE-2024-30377
G DATA Total Security Scan Server Link Following Local Privi -
CVE-2024-1868
G DATA Total Security Link Following Local Privilege Escalat
Same vendor: Bitdefender
-
CVE-2026-6851
Improper link resolution before file access in Bitdefender T -
CVE-2026-10047
Out-of-bounds write in Napoca real-mode hook handler via gue -
CVE-2026-10046
Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map -
CVE-2025-5317
Improper access restriction to critical folder in Bitdefende -
CVE-2025-2245
Server Side Request Forgery in GravityZone Update Server Usi
Same weakness: CWE-59
-
CVE-2026-81310
Linux图像扫描驱动存在链接跟随漏洞 -
CVE-2026-102242
Path Traversal via Symlink Following in allowedLocalRoots in -
CVE-2026-92371
Local Privilege Escalation via Improper Link Resolution in C -
CVE-2026-87798
LXD client recursive file pull allows directory escape via m -
CVE-2026-87799
Arbitrary file write on LXD host via symlink in migration st
V. Comments for CVE-2025-7073
No comments yet