Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-66593 EUVD-2025-209963GHSA-43p3-6ww8-9fwv

An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restrict…

Published May 27, 2026 · Updated Jun 2, 2026 · Assigned by synology

Description

An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

Affected products

VendorProductAffectedFixed
Synology Synology Assistant < 7.0.6-50085 7.0.6-50085

References