PT-2025-46149 · Jetbrains · Dottrace

Published 2025-11-10 · Updated 2025-12-19 · CVE-2025-64457

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains dotTrace versions prior to 2025.2.5

Description A local privilege escalation can occur due to a race condition in JetBrains dotTrace. This issue allows for potential unauthorized access and control within the system.

Recommendations Update JetBrains dotTrace to version 2025.2.5 or later.

Fix

LPE

Race Condition

Time Of Check To Time Of Use

Weakness Enumeration

CWE-362

CWE-367

Related Identifiers

CVE-2025-64457

Affected Products

Dottrace

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-64457 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64457 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1987909566491726321 · Twitter Post
• https://t.me/cveNotify/142264 · Telegram Post
• https://t.me/CVEtracker/36909 · Telegram Post
• https://twitter.com/CVEnew/status/1987879087738593778 · Twitter Post
• https://t.me/cveNotify/146310 · Telegram Post