CVE-2025-1683
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 12, 2025
Updated: Mar 13, 2025
CWE ID 59
Summary
CVE-2025-1683 is a vulnerability affecting the Nomad module in 1E Client versions below 25.3. An attacker with local unprivileged access on a Windows system can exploit improper link resolution before file access, leading to the deletion of arbitrary files on the device through symbolic links. This issue poses a risk to data integrity and security. Users are advised to upgrade to the latest version of the 1E Client to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- 1E