CVE-2024-47856
Critical
Description
In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve that executable instead of the intended executable.
SeverityCritical
CVSS9.8
Exploit probability—
ProductRsa Authentication Agent For Windows
PublishedNov 24, 2025
First seenNov 24, 2025
Weakness typeCWE-23CWE-23
How to fix
Update
- rsa authentication_agent_for_windows7.4.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsa authentication_agent_for_windows | v < 7.4.7 | 7.4.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.