CVE-2025-5474

CVE-2025-5474 describes a Link Following Local Privilege Escalation vulnerability in 2BrightSparks SyncBackFree, specifically within its Mirror functionality. This flaw allows a local attacker, who has already gained low-privileged code execution, to escalate privileges to SYSTEM by abusing the service to delete arbitrary files through a crafted junction. The vulnerability has a CVSS score of 7.3 (HIGH), indicating a significant impact with high confidentiality, integrity, and availability concerns, though it requires user interaction from an administrator. Currently, there is no public exploit intelligence, such as Metasploit modules or ExploitDB entries, and no evidence of active exploitation or significant community discussion surrounding this CVE.