Medium severity6.7NVD Advisory· Published Aug 22, 2025· Updated Apr 15, 2026

CVE-2025-57699

Description

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Westerndigital/Kitfox for Windowsllm-create
Range: <=1.1.1.1

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN75211379/nvd
www.westerndigital.com/support/product-security/wdc-25004-western-digital-kitfox-software-version-1-1-1-1nvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000