CVE-2025-5317

CVE-2025-5317 describes an improper access restriction vulnerability in Bitdefender Endpoint Security Tools for Mac (BEST) versions prior to 7.20.52.200087. This flaw allows a local attacker with administrative (sudo) privileges to bypass the configured uninstall password protection. By manually deleting specific application and library directories, an unauthorized user can effectively remove the security software without authentication. The vulnerability has a CVSS score of 5.5 (Medium), indicating a low attack complexity and requiring local access with low privileges. The potential impact is primarily on integrity (I:H), as it allows for the unauthorized removal of the endpoint security solution, leaving the system unprotected. There is no direct impact on confidentiality or availability. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern at this time.