Vulnerability · Published Jul 11, 2025 · Assigned by ESET
CVE-2025-5028Arbitrary file deletion vulnerability in ESET product installers
Medium 6.8
In plain English
A medium-severity privilege mismanagement in ESET Endpoint Antivirus for Windows from ESET, spol. s.r.o. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 4.0)6.8Medium
Exploit odds (30 days)0.1%top 96.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s.r.o | ESET NOD32 Antivirus | 0 – through 18.1.13.0 |
| ESET, spol. s.r.o | ESET Internet Security | 0 – through 18.1.13.0 |
| ESET, spol. s.r.o | ESET Smart Security Premium | 0 – through 18.1.13.0 |
| ESET, spol. s.r.o | ESET Security Ultimate | 0 – through 18.1.13.0 |
| ESET, spol. s.r.o | ESET Endpoint Antivirus for Windows | 0 – through 12.0.2049.00 – through 11.1.2059.0 |
| ESET, spol. s.r.o | ESET Endpoint Security for Windows | 0 – through 12.0.2049.00 – through 11.1.2059.0 |
| ESET, spol. s.r.o | ESET Small Business Security | 0 – through 18.1.13.0 |
| ESET, spol. s.r.o | ESET Safe Server | 0 – through 18.1.13.0 |
Weakness: CWE-269 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N