CVE-2025-13733: Drbuho Buhontfs

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoNTFS: 1.3.2.

Affected products

• Drbuho Buhontfs: version 1.3.2 only

Published 2025-12-12. Last modified 2026-10-07.