CVE-2025-20387

Medium · 6.5

CVSS

6.5

EPSS

0.5%

Published

Dec 3, 2025

CISA due date

—

The record

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents.

Affected packages

Ecosystem	Package	Introduced	Fixed