CVE-2025-54159

HIGH 7.5CVE-2025-54159 · Published 04/12/2025 · updated 25/09/2026

Package	Affected versions	Patched versions
beedrive synology	`< 1.4.2-13960`	`1.4.2-13960`

Description

Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.

References

synology.com/en-global/security/advisory/Synology_SA_25_08 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free