CVE-2025-30075

Low

Description

In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they could write DLL files to directories within victims' DLL search paths.

SeverityLow
CVSS2.2
Exploit probability—
ProductMindManager
PublishedSep 16, 2025
First seenSep 16, 2025
Weakness typeCWE-673CWE-673

How to fix

Update
  • Alludo MindManager25.0.208 or later

Affected products

ProductAffected versionsFixed in
Alludo MindManagerv < 25.0.20825.0.208

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.