CVE-2025-69689

{
  "id": "CVE-2025-69689",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-27T18:16:53.160",
  "lastModified": "2026-11-04T20:10:00.263",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges."
    },
    {
      "lang": "es",
      "value": "La aplicación Fan Control V251 contiene una vulnerabilidad de manejo inadecuado de privilegios en su Diálogo Abrir Archivo. El diálogo procesa rutas proporcionadas por el usuario con permisos elevados, lo que puede ser explotado por un atacante local para realizar acciones con privilegios de nivel de administrador."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-27T17:54:03.256328Z",
          "id": "CVE-2025-69689",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://getfancontrol.com",
      "source": "[email protected]"
    },
    {
      "url": "https://gist.github.com/ahrixia/7c89bb3f1af6e85aeedde5ddb557a529",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/Rem0o/FanControl.Releases",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/Rem0o/FanControl.Releases/releases/tag/V251",
      "source": "[email protected]"
    }
  ]
}