Medium severity · published Nov 11, 2025
CVE-2025-5317
Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Endpoint Security Tools for Mac · Bitdefender
before 7.20.52.200087 · source: vendor
ES
Endpoint Security · Bitdefender
before 7.20.52.200087 · source: NVD
Affected product
ES
Endpoint Security Tools for Mac
Bitdefender