CVE-2025-59200CWE-362CWE-73

Data Sharing Service Spoofing Vulnerability

High · published October 14, 2025

CVSS v3.1
7.7
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

⚡ A sneaky race condition in the Data Sharing Service Client could let an unauthorized attacker pull off some local spoofing magic! ✨ Think of it like two chefs trying to grab the last piece of cake at the same time — if they aren't careful, one might end up with the whole cake while the other walks away empty-handed. That's how this vulnerability lets an attacker jump in and impersonate others without proper checks! If exploited, this could lead to an unauthorized user impersonating legitimate users, potentially gaining access to sensitive data or functionality. It’s like a party crasher getting into the VIP area just because two guests showed up at the same time and no one was watching the door!

Put simply

Think of it like two chefs trying to grab the last piece of cake at the same time — if they aren't careful, one might end up with the whole cake while the other walks away empty-handed. That's how this vulnerability lets an attacker jump in and impersonate others without proper checks! This vulnerability arises from improper synchronization when multiple processes access shared resources concurrently, leading to race conditions that can allow for unauthorized spoofing actions.

What to do

If exploited, this could lead to an unauthorized user impersonating legitimate users, potentially gaining access to sensitive data or functionality. It’s like a party crasher getting into the VIP area just because two guests showed up at the same time and no one was watching the door! To protect against this, ensure that the Data Sharing Service Client is updated to the latest version that fixes this race condition. Additionally, implement tighter access controls and consider enhancing synchronization mechanisms to prevent concurrent execution issues. 🛡️ This is fixable! Stay proactive, and you'll have this security hole sealed up in no time! 🚀

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-73 · External Control of File Name or Path
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Data Sharing Service Spoofing Vulnerability
    cvelistv5