Medium severity5.5NVD Advisory· Published Nov 11, 2025· Updated Jun 17, 2026

CVE-2025-5317

Description

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bitdefender/Endpoint Security
cpe:2.3:a:bitdefender:endpoint_security:*:*:*:*:*:macos:*:*
Range: <7.20.52.200087
Bitdefender/Endpoint Security Tools for Macllm-fuzzy2 versions
<7.20.52.200087+ 1 more
- (no CPE)range: <7.20.52.200087
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.bitdefender.com/support/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000