CVE-2025-2768

CVE-2025-2768 is an uncontrolled search path element vulnerability in Bdrive NetDrive, allowing local privilege escalation. The flaw stems from the product loading an OpenSSL configuration file from an unsecured location, enabling an attacker with low-privileged code execution to escalate to SYSTEM. Rated 7.8 HIGH on CVSS, this vulnerability requires local access but can lead to full compromise (confidentiality, integrity, availability). Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat but a critical underlying weakness.