PT-2025-11086 · 1E · 1E Client

·

CVE-2025-1683

·

Published

2025-03-12

·

Updated

2026-01-30

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: 1E Client versions prior to 25.3
Description: The issue is related to improper link resolution before file access in the Nomad module, allowing an attacker with local unprivileged access on a Windows system to delete arbitrary files by exploiting symbolic links.
Recommendations: For versions prior to 25.3, update to version 25.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the Nomad module to minimize the risk of exploitation.

Fix

Link Following

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-07417
CVE-2025-1683

Affected Products

1E Client