Skip to content
OpenAdvisories
High · 7.8 CVE-2025-54160 EUVD-2025-201165GHSA-qw9v-q466-7hm6

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop b…

Published Dec 4, 2025 · Updated Dec 4, 2025 · Assigned by synology

Vendor: Synology Product: BeeDrive for desktop

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology BeeDrive for desktop < 1.4.2-13960 1.4.2-13960

References