CVE-2025-66592 — Synology / Synology Active Backup for Business Agent

CVE-2025-66592

Synology / Synology Active Backup for Business Agent PUBLISHED

Description (CNA)

An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Active Backup for Business Agent	affected * before 3.1.0-4967

CWE

CWE-346

References

https://www.synology.com/en-global/security/advisory/Synology_SA_25_16

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.