CVE-2006-1649: Eset Software NOD32 Antivirus

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions.

Affected products

• Eset Software NOD32 Antivirus: version 1.0.11 only; version 1.0.12 only; version 1.0.13 only; version 2.5 only

Published 2006-04-06. Last modified 2026-06-16.