CVE-2025-69689

Summary

The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://getfancontrol.com
• https://github.com/Rem0o/FanControl.Releases
• https://github.com/Rem0o/FanControl.Releases/releases/tag/V251
• https://gist.github.com/ahrixia/7c89bb3f1af6e85aeedde5ddb557a529

• ←Previous
• Next→