← CVE Intelligence

CVE-2025-1683

Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion PUBLISHED

Description (CNA)

Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.

Affected (CNA)

Vendor / productVersions
1E / 1E Clientaffected 0 through 24.5; affected 0 through 25.1; unaffected 25.3

CWE

CWE-59

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.