CVE-2025-43079
Description
The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges (e.g., via sudo) in an environment where $PATH has been manipulated, an attacker with root/sudo privileges could cause malicious executables to be run in place of the intended system binaries. This behavior can be leveraged for local privilege escalation and arbitrary command execution under elevated privileges.
How to fix
- Qualys Inc Qualys Agent7.2.3, 7.1.0, 6.0.0, 6.2.1, 6.3.1, 3.31.1-8, 3.21.1-6, 4.2.6, 5.0.3, 5.0.2, 6.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Qualys Inc Qualys Agent | 5.0 ≤ v < 7.2.3, 3.12 ≤ v < 7.1.0, 4.17 ≤ v < 6.0.0, v < 6.2.1, v < 6.3.1, v < 3.31.1-8, v < 3.21.1-6, v < 4.2.6, v < 5.0.3, v < 5.0.2, v < 6.0.3 | 7.2.3, 7.1.0, 6.0.0, 6.2.1, 6.3.1, 3.31.1-8, 3.21.1-6, 4.2.6, 5.0.3, 5.0.2, 6.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.