High severity7.8NVD Advisory· Published Oct 1, 2025· Updated Oct 12, 2026

CVE-2025-10578

Description

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.

Affected products

Microfocus/Support Assistant
cpe:2.3:a:hp:support_assistant:*:*:*:*:*:*:*:*
Range: <9.47.41.0
Microfocus/HP Support Assistantllm-create
Range: <9.47.41.0
HP Inc./HP Support Assistantv5
Range: See HP Security Bulletin reference for affected versions.

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_13048717-13048785-16/hpsbgn04053nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000