WD Discovery vulnerabilities

2 known vulnerabilities in WD Discovery from Western Digital. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.9 High severity

  WD Discovery: Uncontrolled Search Path Element

  CVE-2025-30248Jan 26, 2026Western Digital

  DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.

• 7.1 High severity

  WD Discovery: Improper Control of Generation of Code

  CVE-2024-22169Aug 2, 2024Western Digital

  WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE' environment variable. Any malicious application operating with standard user permissio