CVE-2025-64642

High · 7.8

CVSS

7.8

EPSS

0.1%

Published

Dec 2, 2025

CISA due date

—

The record

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries.

Affected packages

Ecosystem	Package	Introduced	Fixed