{"id":"CVE-2026-4793","title":"An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.","summary":"An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-276"],"vendor":"synology","product":"assistant","affected":["assistant < 7.0.7-50095"],"patched":["assistant 7.0.7-50095"],"published":"2026-08-03","updated":"2026-08-21","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-4793","references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_26_12","label":"security@synology.com"}],"tags":["nvd"],"epss":0.0015,"epssPercentile":0.04564,"ingestedAt":"2026-08-22T13:32:35.773Z","slug":"CVE-2026-4793","body":"## Overview\n\nAn incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.\n\n## Affected\n\n- `assistant < 7.0.7-50095`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `assistant 7.0.7-50095`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}