PT-2025-22462 · Forcepoint · Forcepoint Fie Endpoint

Published 2025-05-22 · Updated 2025-05-27 · CVE-2025-2272

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint FIE Endpoint versions prior to 25.05

Description The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Privilege Escalation, Code Injection, and Hijacking a privileged process.

Recommendations For versions prior to 25.05, update to version 25.05 or later to resolve the issue.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-2272

Affected Products

Forcepoint Fie Endpoint

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-2272 · Security Note
• https://support.forcepoint.com/s/article/Security-Advisory-Privilege-Escalation-and-Arbitrary-code-execution-in-F1E-Endpoint · Note
• https://twitter.com/CVEnew/status/1925529699138068589 · Twitter Post
• https://twitter.com/cracbot/status/1927318919653515762 · Twitter Post