Medium severity · published Jul 21, 2025
CVE-2025-0664
A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
Trellix Endpoint Security (HX) Agent · Trellix
36.30.0 and 35.31.28 · source: vendor
Affected product
TE
Trellix Endpoint Security (HX) Agent
Trellix