What is the CVSS score of CVE-2019-25344?

CVE-2019-25344 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Golang are affected by CVE-2019-25344?

Mobilego versions 8.5.0 and earlier contain a critical permission flaw that could allow unauthorized users to access sensitive resources, with active public exploits already available.

Is there a public PoC exploit available for CVE-2019-25344?

Yes, a public proof-of-concept exploit is available for CVE-2019-25344. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2019-25344?

Within 24 hours: Identify all systems running Mobilego 8.5.0 or earlier and isolate them from production networks if possible; verify whether public exploits have been detected in your environment. Within 7 days: Implement network segmentation to restrict access to Mobilego instances; apply available vendor mitigations or workarounds; prepare upgrade testing environment. Within 30 days: Upgrade all affected Mobilego instances to version 8.5.1 or later once available; conduct security audit of affected systems for evidence of exploitation.

Golang CVE-2019-25344

HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-02-12 disclosure@vulncheck.com

Golang Mobilego

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

PoC Detected

Feb 26, 2026 - 23:26 vuln.today

Public exploit code

CVE Published

Feb 12, 2026 - 20:16 nvd

HIGH 7.8

DescriptionCVE.org

Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.

AnalysisAI

Mobilego versions up to 8.5.0 is affected by incorrect permission assignment for critical resource (CVSS 7.8).

Technical ContextAI

This vulnerability (CWE-732: Incorrect Permission Assignment for Critical Resource) affects Mobilego. Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.

RemediationAI

Monitor vendor advisories for a patch.

CVE-2019-25344 vulnerability details – vuln.today

Back

Golang CVE-2019-25344

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code