PT-2025-25225 · Clipshare · Clipshare

Pundhapat · Published 2025-06-11 · Updated 2025-06-11 · CVE-2025-49148

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClipShare versions prior to 3.8.5

Description ClipShare is a lightweight and cross-platform tool for clipboard sharing. The issue arises because ClipShare Server for Windows uses the default Windows DLL search order, loading system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. This allows a local, non-privileged user who can write to the folder containing clip share.exe to place malicious DLLs there, leading to arbitrary code execution in the context of the server. If the server is launched by an Administrator or another elevated user, it results in a reliable local privilege escalation.

Recommendations For versions prior to 3.8.5, update to version 3.8.5 to resolve the issue. As a temporary workaround, consider restricting write access to the folder containing clip share.exe to prevent malicious DLL placement.

Exploit

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-49148

GHSA-RC47-H83G-2R8J

Affected Products

Clipshare

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49148.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-49148 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49148 · Vendor Advisory
• https://github.com/thevindu-w/clip_share_server/security/advisories/GHSA-rc47-h83g-2r8j · Note
• https://t.me/latest_high_impact_cve/2609 · Telegram Post
• https://t.me/cvetracker/26036 · Telegram Post
• https://twitter.com/CVEnew/status/1932819465973932443 · Twitter Post