High severity7.0NVD Advisory· Published Nov 6, 2025· Updated Apr 15, 2026

CVE-2025-37735

Description

Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM. In some cases, this could result in local privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elastic/Elastic Defendllm-create
Range: < 8.19.6, 9.1.6, 9.2.0 (see advisory)

Patches

Vulnerability mechanics

References

discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000