PT-2025-50318 · Bitdefender · Bitdefender Total Security

Filip Dragovic · Published 2025-12-10 · Updated 2026-05-18 · CVE-2025-7073

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security version 27.0.46.231

Description A local privilege escalation issue exists in Bitdefender Total Security. A low-privileged attacker can gain elevated privileges due to improper symbolic link validation when bdservicehost.exe deletes files from a user-writable directory, specifically C:ProgramDataAtcFeedback. This allows for arbitrary file deletion. The issue is combined with a file copy operation during network events and a filter driver bypass through DLL injection, leading to arbitrary file copy and code execution with elevated user privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2025-7073

Affected Products

Bitdefender Total Security

References · 6

• https://bitdefender.com/support/security-advisories/local-privilege-escalation-via-arbitrary-file-operation-in-bitdefender-atc-va-12590 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-7073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7073 · Security Note
• https://t.me/CVEtracker/39354 · Telegram Post
• https://twitter.com/CVEnew/status/1998732735742198128 · Twitter Post
• https://t.me/cveNotify/163830 · Telegram Post