Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-57699 EUVD-2025-25503GHSA-54g2-grv7-f82c

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user w…

Published Aug 22, 2025 · Updated Aug 22, 2025 · Assigned by jpcert

Description

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path.
A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.

Affected products

VendorProductAffectedFixed
Western Digital Western Digital Kitfox for Windows prior to 1.1.1.1 —

References