Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-1683

Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
1E

Description

Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1E 1E Client

Default version status: unaffected

  • 0 to ≤ 24.5affected
  • 0 to ≤ 25.1affected
  • 25.3unaffected

References