CVE-2025-36633

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.tenable.com/security/tns-2025-11	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

23 Oct 2025, 16:00

Type	Values Removed	Values Added
First Time		Microsoft windows Microsoft Tenable Tenable nessus Agent
References	~~() https://www.tenable.com/security/tns-2025-11 -~~	() https://www.tenable.com/security/tns-2025-11 - Vendor Advisory
CPE		cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:a:tenable:nessus_agent::::::::
CWE		NVD-CWE-noinfo

16 Jun 2025, 12:32

Type	Values Removed	Values Added
Summary		(es) En versiones de Tenable Agent anteriores a 10.8.5 en un host Windows, se descubrió que un usuario no administrativo podía eliminar arbitrariamente archivos del sistema local con privilegios de SYSTEM, lo que potencialmente podía provocar una escalada de privilegios locales.

13 Jun 2025, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-06-13 15:15

Updated : 2025-10-23 16:00

NVD link : CVE-2025-36633

Mitre link : CVE-2025-36633

CVE.ORG link : CVE-2025-36633

JSON object : View

Products Affected

tenable

nessus_agent

microsoft

windows

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2025-36633", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "vulnreport@tenable.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-06-13T15:15:20.183", "references": [{"url": "https://www.tenable.com/security/tns-2025-11", "tags": ["Vendor Advisory"], "source": "vulnreport@tenable.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "vulnreport@tenable.com", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation."}, {"lang": "es", "value": "En versiones de Tenable Agent anteriores a 10.8.5 en un host Windows, se descubri\u00f3 que un usuario no administrativo pod\u00eda eliminar arbitrariamente archivos del sistema local con privilegios de SYSTEM, lo que potencialmente pod\u00eda provocar una escalada de privilegios locales."}], "lastModified": "2025-10-23T16:00:44.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79C30967-5DED-4A20-897E-2142B9548579", "versionEndExcluding": "10.8.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vulnreport@tenable.com"}