CVE-2025-2782mediumCWE-276

CVE-2025-2782: medium-severity vulnerability in WatchGuard SSO Terminal Services Agent

WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory

Published · Updated

Follow this CVE+ Monitor SSO Terminal Services Agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 0.2%
The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H
Affected products
WatchGuard · SSO Terminal Services Agent