CVE-2025-2102: Medium severity hypr passwordless vulnerability
Published May 21, 2025
·Updated
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1.
Affected Software
1 affected component
HYPR Passwordless<10.1
Event History
May 21, 2025
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-2102?
CVE-2025-2102 is categorized as a privilege escalation vulnerability.
2
How do I fix CVE-2025-2102?
To remediate CVE-2025-2102, update HYPR Passwordless to version 10.1 or later.
3
What platforms are affected by CVE-2025-2102?
CVE-2025-2102 affects the Windows platform of HYPR Passwordless before version 10.1.
4
Can CVE-2025-2102 be exploited remotely?
CVE-2025-2102 can potentially be exploited by local users to escalate their privileges.
5
Is there a workaround for CVE-2025-2102?
There are no known workarounds for CVE-2025-2102; upgrading to the latest version is recommended.