PT-2025-38007 · Alludo · Mindmanager

Ianis Bernard · Published 2025-09-16 · Updated 2025-09-20 · CVE-2025-30075

Positive Technologies (AI Summary)

CVSS v3.1

2.2

Low

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Alludo MindManager versions prior to 25.0.208

Description Alludo MindManager on Windows allows attackers to potentially execute code as other local users on the same machine by writing DLL files to directories within victims' DLL search paths.

Recommendations Update Alludo MindManager to version 25.0.208 or later.

Fix

Weakness Enumeration

CWE-673

Related Identifiers

CVE-2025-30075

Affected Products

Mindmanager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-30075 · Security Note
• https://pastebin.com/5CaNfyGH · Note
• https://twitter.com/CVEnew/status/1969291987510583432 · Twitter Post