7.8HIGH

CVE-2025-54158 — Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop…

Synology · Beedrive · Published 4 Dec 2025 · Modified 25 Sept 2026

Description

Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.

References

https://www.synology.com/en-global/security/advisory/Synology_SA_25_08

What to do

Check whether Beedrive is in your asset inventory.
Patch in the next maintenance window; prioritise internet-facing systems.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-54158