PT-2025-25419 · Tenable · Tenable Agent

CVE-2025-36633

·

Published

2025-06-13

·

Updated

2025-06-13

CVSS v3.1

8.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Tenable Agent versions prior to 10.8.5
Description A non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation on a Windows host.
Recommendations For Tenable Agent versions prior to 10.8.5, update to version 10.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive system files to minimize the risk of exploitation.

Fix

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-36633

Affected Products

Tenable Agent