PT-2025-49039 · Synology · Synology Beedrive

Zhao Runzi · Published 2025-12-04 · Updated 2026-02-04 · CVE-2025-54160

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synology BeeDrive for desktop versions prior to 1.4.2-13960

Description A path traversal issue exists in BeeDrive. This allows local users to potentially execute arbitrary code. The issue is due to insufficient restriction of file paths. The vulnerability affects the desktop application.

Recommendations Update Synology BeeDrive for desktop to version 1.4.2-13960 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-54160

Affected Products

Synology Beedrive

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-54160 · Security Note
• https://synology.com/en-global/security/advisory/Synology_SA_25_08 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54160 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1996702842929746176 · Twitter Post
• https://twitter.com/CVEnew/status/1996600314175049783 · Twitter Post
• https://t.me/cveNotify/150869 · Telegram Post
• https://twitter.com/cracbot/status/1998346951419723905 · Twitter Post