CVE-2024-52925: Opswat Metadefender Kiosk

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software encrypted USB drives.

Affected products

• Opswat Metadefender Kiosk: before 4.7.0 (fixed in 4.7.0)

Published 2025-02-26. Last modified 2026-06-17.