CVE-2025-36633

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation.

Score

CVSS 3.1 8.8 High

Status

Analyzed - vulnreport@tenable.com

Published

2025-06-13

Last modified

2026-02-26

Weaknesses

CWE-269

Affected products

• Agent (Tenable)
• Nessus Agent (Tenable)

References

• https://www.tenable.com/security/tns-2025-11