CVE-2025-20902

Summary

CVE-2025-20902 is a vulnerability affecting the Media Controller software before version 1.0.24.5282. This issue involves a lack of adequate access control, enabling a local attacker to execute activities within the MediaController's privilege. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to sensitive media-related functionalities, posing a significant threat to the security and privacy of affected systems. Users are strongly advised to upgrade to the latest version of the Media Controller to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.