CVE-2025-69784 describes a high-severity vulnerability in OpenEDR 2.5.1.0, where a local, non-privileged attacker can exploit a kernel driver interface to redirect DLL injection paths. This allows the attacker to load malicious DLLs into high-privilege processes, resulting in arbitrary code execution with SYSTEM privileges and full system compromise. Rated with a CVSS score of 8.8 (High), this vulnerability is not currently listed in CISA KEV and lacks public exploit code, but it is on the "Hot List: Active" and has generated community discussion, indicating an elevated risk profile.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.5.1.0CPE matchmatch criteria | cpe:2.3:a:xcitium:openedr:2.5.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.