CVE-2025-10231

Published: Sep 10, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.

Affected (1)

Products: N Able: N Central

N Able

1 product

N Central

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
N Able N Central	Before 2025.3

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm

Source: a5532a13-c4dd-4202-bef1-e0b8f2f8d12b

Release Notes

https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation

Source: a5532a13-c4dd-4202-bef1-e0b8f2f8d12b

Vendor Advisory

Timeline

No history available yet.