CVE-2025-69784 - Vulnerability Analysis

Overview

OpenEDR 2.5.1.0 contains a privilege escalation caused by a vulnerable IOCTL interface allowing DLL injection path modification, letting local non-privileged attackers execute arbitrary code with SYSTEM privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with SYSTEM privileges, leading to full system compromise.

Mitigation

Update to the latest version of OpenEDR.

References

• https://www.openedr.com/
• https://gist.github.com/ikerl/c3ec81f12ded44c2e0ae2dfdacb562ba
• https://github.com/ComodoSecurity/openedr
• https://github.com/ComodoSecurity/openedr/issues/49
• https://scavengersecurity.com/posts/edr-as-rootkit-2/

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 16, 2026

🟠 CVE-2025-69784 - High (8.8) A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69784/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner