CVE-2025-8074

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-04

Last updated on: 2026-02-04

Assigner: Synology Inc.

Description

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-04

Last Modified

2026-02-04

Generated

2026-07-06

AI Q&A

2025-12-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-8074

EUVD

EUVD-2025-201163

Affected Vendors & Products

Vendor	Product	Version / Range
synology	beedrive	1.4.3-13973
synology	beedrive	to 1.4.3-13973 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Impact Analysis

The vulnerability can allow a local user to write arbitrary files, which may lead to integrity issues or disruption of service, but it does not compromise sensitive information.

Executive Summary

This vulnerability is an origin validation error in Synology BeeDrive for desktop versions before 1.4.3-13973. It allows local users to write arbitrary files containing non-sensitive information through unspecified methods.

Compliance Impact

Since the vulnerability involves writing non-sensitive information only and does not affect confidentiality, it is unlikely to directly impact compliance with standards like GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2025-8074. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70