CVE-2024-47856: rsa authentication_agent_for_windows Relative Path Traversal

Vulnerability summary

CVE-2024-47856 is a critical (CVSS 9.8) Relative Path Traversal vulnerability in rsa authentication_agent_for_windows. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44% of scored vulnerabilities.

Timeline

1. 24-11-2025
   PublishedVulnerability first disclosed.
2. 25-11-2025
   Last modifiedVulnerability information updated.

Description

In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve that executable instead of the intended executable.

• CWE-23Relative Path TraversalThe product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.