CVE-2025-10231CWE-276

CVE-2025-10231

High · published September 10, 2025

CVSS v3.1

7.0

EPSS

Percentile

2.4

In the wild

Unconfirmed

What it is

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.

The record

Technical detail

CVSS v3.1: 7.0 · HIGH
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00130 · 2.4th percentile
Weakness: CWE-276 · Incorrect Default Permissions
Published: 2025-09-10T18:15Z

Affected products (1)

Product	Versions	Fixed in
n-able/n-central	< 2025.3	2025.3

References (2)

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm · a5532a13-c4dd-4202-bef1-e0b8f2f8d12b https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation · a5532a13-c4dd-4202-bef1-e0b8f2f8d12b

EPSS history

Timeline

10 SEP 13:34Z
N-central Incorrect Default Permissions could lead to Privilege Escalation
cvelistv5