CVE-2025-20978 Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege

Description

Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege.

Affected products and versions

Product	Affected versions	Fixed in
PENUP 3.9	earliest → < 3.9.19.32	3.9.19.32

Other CVEs of PENUP

The 2 CVEs of PENUP →

CVE-2021-25463 Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview 4.0 Medium