Skip to content
OpenAdvisories
High · 7.8 CVE-2025-24915 EUVD-2025-7246GHSA-x7rr-8x5p-q75q

When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure perm…

Published Mar 21, 2025 · Updated Feb 26, 2026 · Assigned by tenable

Description

When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories.  This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.

Affected products

VendorProductAffectedFixed
Tenable Nessus Agent < 10.8.3 10.8.3

Advisories 1

References