CVE-2025-54158: Synology Beedrive

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.

Affected products

• Synology Beedrive: before 1.4.2-13960 (fixed in 1.4.2-13960)

Published 2025-12-04. Last modified 2026-09-25.