High · 7.5 CVE-2025-54159 EUVD-2025-201166GHSA-37xr-mgj2-w9fc

Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbit…

Published Dec 4, 2025 · Updated Dec 4, 2025 · Assigned by synology

Vendor: Synology Product: BeeDrive for desktop

Description

Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	BeeDrive for desktop	< 1.4.2-13960	1.4.2-13960

References

Synology-SA-25:08 BeeDrive for desktop vendor-advisory