Synology BeeDrive for Desktop Path Traversal Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A path traversal vulnerability has been identified in Synology BeeDrive for desktop, prior to version 1.4.2-13960. This vulnerability allows local users to execute arbitrary code by improperly limiting a pathname to a restricted directory.
Impact
Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the affected system.
Remediation
Users are advised to upgrade to Synology BeeDrive for desktop version 1.4.2-13960 or above.
Added: Dec 4, 2025, 4:23 PM
Updated: Dec 4, 2025, 5:24 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
3.3remediation
7.7relevance
1.4threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.