What’s Vulnerable › Vulnerabilities

CVE-2025-13130: Radarr Service Radarr.Console.exe default permission

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-13 · updated 2026-10-19
• Weakness: CWE-266

Description

A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of the component Service. Such manipulation leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Radarr: 5.28.0.10274

References

• https://github.com/lakshayyverma/CVE-Discovery/blob/main/Radarr.md
• https://vuldb.com/?ctiid.332361
• https://vuldb.com/?id.332361
• https://vuldb.com/?submit.683876

Get alerted when CVE-2025-13130 or the next vulnerability affects your stack