CVE-2025-13593
Analyzed Analyzed - Analysis Complete

Origin Validation Error in Synology ActiveProtect Agent

Publication date: 2026-05-27

Last updated on: 2026-06-02

Assigner: Synology Inc.

Description
Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-05-27
Last Modified
2026-06-02
Generated
2026-07-06
AI Q&A
2026-05-27
EPSS Evaluated
2026-07-05
NVD
CVE-2025-13593
EUVD
EUVD-2025-209958

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
synology activeprotect_agent to 1.1.0-0439 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an origin validation error in the Synology ActiveProtect Agent versions before 1.1.0-0439. It allows local users to write arbitrary files with restricted content during the installation process.

Compliance Impact

The provided information does not specify how the vulnerability in Synology ActiveProtect Agent affects compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

Synology has not provided any specific detection methods or commands to identify this vulnerability on your network or system.

The recommended action to mitigate this vulnerability is to upgrade the ActiveProtect Agent to version 1.1.0-0439 or later.

Impact Analysis

The vulnerability can allow a local user to write arbitrary files with restricted content, which may lead to unauthorized modification or disruption of the system. This could potentially impact system integrity and availability.

Mitigation Strategies

To mitigate the vulnerability CVE-2025-13593 in Synology ActiveProtect Agent, users should upgrade the software to version 1.1.0-0439 or later.

No other specific mitigation steps have been provided by Synology.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-13593. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart