CVE-2021-41562: Deletion of arbitrary files vulnerability in Snow Agent for Windows

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-03 · updated 2026-06-17
Weakness: CWE-64

Description

A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows.

Affected products

Snow Software Inventory Agent: from 5.0.0 before 6.7.2 — fixed in 6.7.2

How to fix

Upgrade to a fixed version: Snow Software Inventory Agent 6.7.2. Check the vendor advisory for mitigations.

References

https://community.snowsoftware.com/s/group/0F91r000000QUhPCAW/news-updates
https://community.snowsoftware.com/s/group/0F91r000000QUhPCAW/news-updates

Get alerted when CVE-2021-41562 or the next vulnerability affects your stack