Beedrive vulnerabilities

4 known vulnerabilities in Beedrive from Synology. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  BeeDrive for desktop: Uncontrolled Search Path Element

  CVE-2023-52945May 27, 2026Synology

  Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors.

• 7.8 High severity

  BeeDrive for desktop: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-54160Dec 4, 2025Synology

  Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.

• 7.5 High severity

  BeeDrive for desktop: Missing Authorization

  CVE-2025-54159Dec 4, 2025Synology

  Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.

• 7.8 High severity

  BeeDrive for desktop: Missing Authentication for Critical Functionality

  CVE-2025-54158Dec 4, 2025Synology

  Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.