CVE-2025-64391
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to write files to arbitrary locations when an administrator installs it.
Risk Assessment
Risk of privilege escalation or system integrity compromise by writing files to critical locations.
Recommendation
Update Veeam Agent to the latest version and restrict local user privileges.
Other vulnerabilities in Veeam Agent for Microsoft Windows
See all- CVE-2026-58068Medium
A vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system.
- CVE-2025-48982High
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a malicious file.
Original NVD description (English source)
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS