CVE-2025-13733: BuhoNTFS 1.3.2 - Local Privilege Escalation

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-12 · updated 2026-10-07
Weakness: CWE-732

Description

BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoNTFS: 1.3.2.

Affected products

Dr.Buho BuhoNTFS: 1.3.2

References

https://fluidattacks.com/advisories/greenday
https://www.drbuho.com/buhontfs
https://www.drbuho.com/download/buhontfs.dmg
https://fluidattacks.com/advisories/greenday

Get alerted when CVE-2025-13733 or the next vulnerability affects your stack