CVE-2025-10644

CVE-2025-10644 is a critical authentication bypass vulnerability affecting Wondershare Repairit, stemming from incorrect permission assignments within an SAS token. This flaw allows unauthenticated remote attackers to execute arbitrary code on customer endpoints, posing a significant supply-chain attack risk. With a CVSS score of 9.4, it represents a high-severity threat due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion, indicating awareness of its potential.