CVE-2025-57625

Name of the Vulnerable Software and Affected Versions CYRISMA Sensor versions prior to 444

Description CYRISMA Sensor before version 444 for Windows contains an insecure folder and file permissions issue. A low-privileged user can exploit this to escalate privileges and execute arbitrary code with NT AUTHORITYSYSTEM privileges. This is achieved by replacing DataSpotliteAgent.exe or other binaries called by the Cyrisma Agent service during startup.

Recommendations Update CYRISMA Sensor to version 444 or later. As a temporary workaround, restrict write access to the affected folder and files to prevent unauthorized modification of DataSpotliteAgent.exe and other binaries called by the Cyrisma Agent service.