Threat Investigation
Request a demo

CVE-2025-57625

High

Description

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by the Cyrisma_Agent service when it starts

SeverityHigh
CVSS8.8
Exploit probability—
ProductSensor
PublishedSep 16, 2025
First seenSep 16, 2025
Weakness typeCWE-276CWE-276

How to fix

Update
  • CYRISMA Sensor444 or later

Affected products

ProductAffected versionsFixed in
CYRISMA SensorNo range specified444

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.