CVE-2025-8074: Medium severity Synology BeeDrive vulnerability
Published Dec 4, 2025
·Updated
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.
Affected Software
2 affected components
Synology BeeDrive<1.4.3-13973
Synology BeeDrive<1.4.3-13973
Event History
Dec 4, 2025
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-8074?
CVE-2025-8074 is classified as a medium severity vulnerability.
2
How do I fix CVE-2025-8074?
To fix CVE-2025-8074, update Synology BeeDrive to version 1.4.3-13973 or later.
3
What type of vulnerability is CVE-2025-8074?
CVE-2025-8074 is an origin validation error vulnerability.
4
Who is affected by CVE-2025-8074?
CVE-2025-8074 affects users of Synology BeeDrive for desktop versions prior to 1.4.3-13973.
5
What kind of impact does CVE-2025-8074 have?
CVE-2025-8074 allows local users to write arbitrary files, posing a risk of data manipulation.