CVE-2025-50325 Security feature bypass in n/a
Remote attackers can bypass Mark-of-the-Web protection in BandiZip, potentially allowing execution of untrusted files without user warnings.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-50325?
CVE-2025-50325 is a medium-severity vulnerability in n/a, published on 22 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of BandiZip
Weakness: CWE-693
Which versions are affected by CVE-2025-50325?
How do I fix CVE-2025-50325?
No fix has been published for CVE-2025-50325 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-50325 being exploited?
There is no known exploitation of CVE-2025-50325 in the wild and no public exploit code.
Sources
Also known as GHSA-246m-jxxr-prqr.