CVE-2025-57699

Publication date

2025-08-22 06:37:41

Family

jpcert

State

PUBLISHED

Description

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.