Overly Permissive ACLs in DriveLock Agent Allow Local Exploitation

Publication date: 2025-12-17

Last updated on: 2025-12-18

Assigner: MITRE

Description

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and files created by the agent are created with overly permissive ACLs, allowing local users without administrator rights to trigger actions or destabilize the agent.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-17

Last Modified

2025-12-18

Generated

2026-07-06

AI Q&A

2025-12-18

EPSS Evaluated

2026-07-05

NVD

CVE-2025-67794

EUVD

EUVD-2025-204000

Affected Vendors & Products

Vendor	Product	Version / Range
drivelock	drivelock	From 24.1 (inc) to 24.1.4 (inc)
drivelock	drivelock	From 24.2 (inc) to 24.2.8 (exc)
drivelock	drivelock	From 25.1 (inc) to 25.1.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability exists in DriveLock versions 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. It involves directories and files created by the DriveLock agent having overly permissive Access Control Lists (ACLs). This means that local users who do not have administrator rights can exploit these permissions to trigger actions or destabilize the agent.

Impact Analysis

The vulnerability can allow local users without administrator privileges to perform unauthorized actions or destabilize the DriveLock agent. This could lead to potential security risks such as unauthorized modifications, disruptions in the agent's operation, or other unintended behaviors affecting system stability or security.

Hi! I’m here to help you understand CVE-2025-67794. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70