CVE-2025-64391: Agent for Windows 0 to before 13.1

Affected technology

Agent for Windows · 0 to before 13.1
Veeam

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Passive user interaction

What an attacker can do

A low-privileged local user can make the agent write files to arbitrary locations when an administrator installs it. Vendor/CNA’s CVSS 4.0 assessment (base score 4.1/10) rates confidentiality and availability impact as none; integrity impact as high.