CVE-2025-36631 HIGH

CVE-2025-36631: Local Privilege Escalation

Vendor Tenable

Product Agent

Weakness CWE-269

Published June 13, 2025

Last update June 13, 2025

View on NVD All CVEs

CVSS base score

8.4/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

What the vulnerability does

01Description

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.

Key dates

02Disclosure timeline

June 13, 2025 CVE published

June 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-36631 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html

Related vulnerabilities

CVE-2025-36631: Local Privilege Escalation

01Description

02Disclosure timeline

03References

04Related CVE