PT-2025-46315 · Bitdefender · Bitdefender Endpoint Security For Mac

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-5317

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Mac (BEST) versions prior to 7.20.52.200087

Description A configuration issue in Bitdefender Endpoint Security Tools for Mac (BEST) allows local users with administrative privileges to bypass the uninstall password protection. Specifically, an unauthorized user with sudo privileges can remove the application directory (/Applications/Endpoint Security for Mac.app/) and associated directories within /Library/Bitdefender/AVP without the required uninstall password.

Recommendations Update Bitdefender Endpoint Security Tools for Mac (BEST) to version 7.20.52.200087 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-5317

Affected Products

Bitdefender Endpoint Security For Mac

References · 7

• https://osv.dev/vulnerability/CVE-2025-5317 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5317 · Security Note
• https://bitdefender.com/support/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac · Vendor Advisory
• https://t.me/cveNotify/142388 · Telegram Post
• https://twitter.com/CVEnew/status/1988182962001871153 · Twitter Post
• https://t.me/CVEtracker/37014 · Telegram Post
• https://bitdefender.com/consumer/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac · Note