PT-2025-11086

Name of the Vulnerable Software and Affected Versions: 1E Client versions prior to 25.3 Description: The issue is related to improper link resolution before file access in the Nomad module, allowing an attacker with local unprivileged access on a Windows system to delete arbitrary files by...

1E Client security vulnerabilities

1E Client is an agent-less endpoint management software from 1E Client USA. A security vulnerability exists in 1E Client versions prior to 25.3 that stems from improper link resolution prior to file access, which could allow a local attacker to delete arbitrary files...

1E Client code-related vulnerabilities

1E Client is an agent-less endpoint management software from 1E USA. A security vulnerability exists in 1E Client version 5.0.0.745 that stems from %PROGRAMFILES%1EClientTachyon.Performance.Metrics.exe failing to handle unreferenced paths. This may allow a remote attacker to gain elevated...

1E Client Permission Authorization and Access Control Vulnerabilities

1E Client is an agent-less endpoint management software from 1E 1E Client USA. A security vulnerability exists in 1E Client versions 5.0.0.745, 4.1.0.267, which originates in the %PROGRAMDATA%1EClient directory that allows remote authenticated and local users to create and modify files in...