ZDI-25-1015: Parallels Toolbox CleanDrive Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Toolbox. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. Additional user interaction is required in that an administrator must begin a cleanup of temporary files on the system. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-66288.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-1015?
The severity of ZDI-25-1015 is classified as a privilege escalation vulnerability.
How do I fix ZDI-25-1015?
To fix ZDI-25-1015, you should apply the latest security updates provided by Parallels for the Toolbox application.
Who is affected by ZDI-25-1015?
ZDI-25-1015 affects users of Parallels Toolbox who are running unpatched versions of the software.
What type of attack does ZDI-25-1015 facilitate?
ZDI-25-1015 facilitates local privilege escalation attacks, allowing attackers with low-privileged access to gain higher privileges.
What is required for an attacker to exploit ZDI-25-1015?
An attacker must first obtain low-privileged access on the target host system to exploit ZDI-25-1015.