CVE-2025-64695: High severity LogStash LogStare Collector vulnerability
Published Nov 21, 2025
·Updated
Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privilege of the user invoking the installer.
Affected Software
3 affected components
LogStash LogStare Collector
All of the following
Secuavail Logstare Collector<2.4.2
Microsoft Windows
Event History
Nov 21, 2025
CVE Published
via MITRE·06:18 AM
Data Sourced
via MITRE·06:18 AM
DescriptionSeverity
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-64695?
CVE-2025-64695 is considered a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2025-64695?
To fix CVE-2025-64695, ensure you update to the latest version of LogStare Collector that addresses this issue.
3
What are the risks associated with CVE-2025-64695?
The risks associated with CVE-2025-64695 include the possibility of attackers executing malicious code with the user's privileges.
4
Who is affected by CVE-2025-64695?
CVE-2025-64695 affects users of the LogStare Collector on Windows who utilize the installer.
5
Can CVE-2025-64695 be exploited remotely?
CVE-2025-64695 typically requires local access to exploit, making remote exploitation less likely.