Vulnerability DatabaseCVE-2025-48817

CVE-2025-48817:
vulnerability analysis and mitigation

Overview

A critical security vulnerability (CVE-2025-48817) was discovered in Microsoft Remote Desktop Client that allows unauthorized attackers to execute code over a network through a relative path traversal weakness. The vulnerability was disclosed on July 8, 2025, affecting multiple versions of Windows operating systems from Server 2008 to Windows 11 24H2 (NVD, Cybersecurity News).

Technical details

The vulnerability is classified with a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. It combines a relative path traversal (CWE-23) with improper access control (CWE-284) in the Remote Desktop Client. The vulnerability affects Remote Desktop client versions prior to 1.2.6353.0 (NVD, Qualys).

Impact

Successful exploitation of this vulnerability enables attackers to execute arbitrary code with elevated privileges on affected systems. The attack vector is particularly concerning as it reverses the typical client-server security model, allowing compromised servers to attack connecting clients (Cybersecurity News).

Mitigation and workarounds

Microsoft has released comprehensive security updates addressing CVE-2025-48817 across its entire Windows ecosystem. Organizations should prioritize applying security updates KB5062553 and KB5062552, as well as related patches corresponding to their specific Windows versions. The Remote Desktop client should be updated to version 1.2.6353.0 or later (Qualys).