CVE-2025-57625

CYRISMA Sensor for Windows versions prior to 444 is vulnerable to an Insecure Folder and File Permissions flaw. A low-privileged user can exploit these permissions to replace DataSpotliteAgent.exe or other binaries invoked by the Cyrisma_Agent service during startup. This allows for local privile...

CVE-2025-57625: Incorrect Default Permissions

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...