CVE-2025-5317
Medium
Description
An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password.
SeverityMedium
CVSS5.5
Exploit probability—
ProductBitdefender Endpoint Security
PublishedNov 11, 2025
First seenNov 11, 2025
Weakness typeCWE-862Missing authorization
How to fix
Update
- bitdefender endpoint_security7.20.52.200087 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitdefender endpoint_security | v < 7.20.52.200087 | 7.20.52.200087 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.