CVE-2025-1683CWE-59

Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion

High · published March 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2025-03-12T15:25Z
EPSS history
Timeline
  • 12 MAR 15:25Z
    Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion
    cvelistv5