Vulnerability Description
A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of the component Service. Such manipulation leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/lakshayyverma/CVE-Discovery/blob/main/Radarr.md
- https://vuldb.com/?ctiid.332361
- https://vuldb.com/?id.332361
- https://vuldb.com/?submit.683876
FAQ
What is CVE-2025-13130?
CVE-2025-13130 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of the component Service. Such manipulation ...
How severe is CVE-2025-13130?
CVE-2025-13130 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13130?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.