Vulnerability · Published Nov 13, 2025 · Assigned by VulDB

CVE-2025-13131Sonarr Service Sonarr.Console.exe default permission

High 7.8

In plain English

A high-severity incorrect default permissions in Sonarr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.1%top 96.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vendor confirms this vulnerability but classifies it as a "low severity issue due to the default service user being used as it would either require someone to intentionally change the service to a highly privileged account or an attacker would need an admin level account". It is planned to fix this issue in the next major release v5.

Affected products (as reported)

Vendor	Product	Versions
n/a	Sonarr	4.0.15.2940

Weakness: CWE-276, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:C

References

VDB-332362 | Sonarr Service Sonarr.Console.exe default permission vdb-entry
VDB-332362 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #683894 | Sonarr 4.0.15.2940 Incorrect Default Permissions third-party-advisory
https://github.com/lakshayyverma/CVE-Discovery/blob/main/Sonarr.md related