Synology BeeDrive for Desktop Missing Authentication Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A vulnerability exists in Synology BeeDrive for desktop, prior to version 1.4.2-13960, due to missing authentication for critical functions. This flaw enables local users to execute arbitrary code through unspecified vectors.
Impact
Exploitation of this vulnerability allows local users to execute arbitrary code on the affected system.
Remediation
Users are advised to upgrade to Synology BeeDrive for desktop version 1.4.2-13960 or above.
Added: Dec 4, 2025, 4:24 PM
Updated: Dec 4, 2025, 5:25 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
3.3remediation
7.7relevance
1.3threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.