EUVD-2026-52187
GHSA-x8pf-pjxr-ccfw
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Local installation context mandates AV:L and UI:R; a standard low-privilege local account suffices for PR:L; arbitrary file read, write, and DoS capability justify C:H/I:H/A:H with unchanged scope.
Primary rating from Vendor (synology).
CVSS VectorNVD
Lifecycle Timeline
8DescriptionNVD
An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.
AnalysisAI
Incorrect default permissions in Synology Assistant before version 7.0.7-50095 expose locally created installation artifacts to unauthorized access, enabling low-privileged local users to read or write arbitrary files and trigger denial-of-service conditions during the installation window. The CVSS score of 7.3 (High) with C:H/I:H/A:H reflects the breadth of potential file system impact, though an EPSS of 0.13% (3rd percentile) and SSVC exploitation status of 'none' confirm no public exploitation activity at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: the attacker must hold a low-privileged local user account on the target system (PR:L); Synology Assistant must be actively undergoing installation at the time of the attack (UI:R - the vulnerability window exists specifically 'during installation' per the description); and the system must be running an affected version prior to 7.0.7-50095. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H constrains the attacker population to users already present on the local system during an active installation, materially limiting real-world risk compared to network-exploitable vulnerabilities. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Synology Assistant to version 7.0.7-50095 or later, which corrects the incorrect default permissions applied during installation; this is the primary and only confirmed fix per vendor advisory Synology_SA_26_12 at https://www.synology.com/en-global/security/advisory/Synology_SA_26_12. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all systems running Synology Assistant to identify instances prior to version 7.0.7-50095 and assess local user access patterns to those systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-276 – Incorrect Default Permissions
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today