CVE-2025-66593

Synology / Synology Assistant PUBLISHED

Description (CNA)

An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Assistant	affected * before 7.0.6-50085

CWE

CWE-346

References

https://www.synology.com/en-global/security/advisory/Synology_SA_25_17

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.