Synology BeeDrive for Desktop Missing Authorization Vulnerability Allowing Arbitrary File Deletion
Vulnerability
A missing authorization vulnerability has been identified in Synology BeeDrive for desktop, prior to version 1.4.2-13960. This vulnerability allows remote attackers to delete arbitrary files through unspecified vectors.
Impact
Exploitation of this vulnerability could lead to unauthorized deletion of files on the victim's system.
Remediation
Users are advised to upgrade to Synology BeeDrive for desktop version 1.4.2-13960 or above.
Added: Dec 4, 2025, 4:23 PM
Updated: Dec 4, 2025, 5:25 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
7.7relevance
1.3threat
0.0urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.