What is the CVSS score of CVE-2025-8074?

CVE-2025-8074 has a CVSS 3.1 base score of 5.6 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H. EPSS exploitation probability: 0.0%.

Which versions of Beedrive are affected by CVE-2025-8074?

Organizations using validation error vulnerability in BeeDrive in Synology BeeDrive for desktop should be aware of moderate risk from CVE-2025-8074 rated CVSS 5.6.. A patch is available.

How to fix or mitigate CVE-2025-8074?

Within 30 days: Identify affected systems running validation error vulnerability in BeeDrive in Synology BeeDr and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Beedrive CVE-2025-8074

EUVD-2025-201163 MEDIUM

Origin Validation Error (CWE-346)

2025-12-04 security@synology.com

Synology Information Disclosure Beedrive

5.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.6 MEDIUM

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

1.4.3-13973

EUVD ID Assigned

Mar 15, 2026 - 16:35 euvd

EUVD-2025-201163

Analysis Generated

Mar 15, 2026 - 16:35 vuln.today

CVE Published

Dec 04, 2025 - 16:16 nvd

MEDIUM 5.6

DescriptionCVE.org

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.

Analysis

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Origin Validation Error (CWE-346).