PT-2025-38067 · Unknown · Cyrisma Agent

Thegoldenrecord · Published 2025-09-16 · Updated 2025-09-20 · CVE-2025-57624

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CYRISMA Agent versions prior to 444

Description A DLL hijacking issue exists in CYRISMA Agent. This allows local users to escalate privileges and execute arbitrary code by exploiting multiple DLLs.

Recommendations Update CYRISMA Agent to version 444 or later.

Exploit

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-57624

Affected Products

Cyrisma Agent

References · 6

• 🔥 https://msry1.gitbook.io/thegoldenrecord/blog/vulnerability-and-bug-disclosures/cyrsma-sensor-version-less-than-2.5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57624 · Security Note
• https://twitter.com/VulmonFeeds/status/1968119315493794230 · Twitter Post
• https://t.me/CVEtracker/32676 · Telegram Post
• https://twitter.com/CVEnew/status/1969291995915927900 · Twitter Post
• https://youtu.be/lZAdbrWt-34 · Note