Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-13593 EUVD-2025-209958GHSA-r6c2-6c2c-g3cg

Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with re…

Published May 27, 2026 · Updated Jun 2, 2026 · Assigned by synology

Vendor: Synology Product: ActiveProtect Agent

Description

Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

Affected products

VendorProductAffectedFixed
Synology ActiveProtect Agent < 1.1.0-0439 1.1.0-0439

References