CVE-2025-57521
BaseFortify
Publication date: 2025-10-21
Last updated on: 2025-10-22
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| bambu_lab | bambu_studio | 2.1.1.52 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-77 | The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Bambu Studio 2.1.1.52 and earlier allows an attacker to execute arbitrary code during the application's startup. The application loads a network plugin without checking its digital signature or verifying its authenticity. A local attacker can place a malicious component in a location the application expects (such as under %APPDATA%), causing the application to run the attacker's code with the user's privileges. Because the main application is digitally signed, the malicious component may inherit this trust and avoid detection by security tools that trust signed processes.
How can this vulnerability impact me? :
This vulnerability can lead to arbitrary code execution within the context of the user running the application. An attacker who exploits this can run malicious code on your system with your user privileges, potentially leading to unauthorized actions, data compromise, or further system compromise depending on the user's permissions.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, immediately restrict or monitor the locations where the application loads network plugins, such as the %APPDATA% directory, to prevent placement of malicious components. Additionally, consider running the application with the least privilege necessary to limit the impact of arbitrary code execution. Applying application whitelisting or endpoint protection that does not solely rely on the digital signature of the parent process may also help reduce risk.