Synology Beedrive vulnerabilities

6 vulnerabilities

Known vulnerabilities in Synology Beedrive, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2025-54160synologybeedrive+1
EPSS score
0.20%
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.
7.5CVE-2025-54159synologybeedrive+1
EPSS score
0.41%
Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.
7.8CVE-2025-54158synologybeedrive+1
EPSS score
0.18%
Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.
5.6CVE-2025-8074synologybeedrive+1
EPSS score
0.09%
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.
6.8CVE-2024-11399synologybeedrive+1
EPSS score
0.11%
Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to conduct denial-of-service attacks via unspecified vectors.
7.8CVE-2023-52945synologybeedrive+1
EPSS score
0.14%
Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors.