What is CVE-2025-2489?

CVE-2025-2489 is a vulnerability in Ntfs Tool, classified under CWE-922. Published 2025-03-18.

Is CVE-2025-2489 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Ntfs Tool

CVE-2025-2489

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json.

EPSS: 0.002 (5.4th percentile) — read the EPSS interpretation.

Affected products

Ntfs Tool — versions 3.5.1

Weakness classification (CWE)

CWE-922

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve-coordination@incibe.es

Frequently asked questions

What is CVE-2025-2489?: CVE-2025-2489 is a vulnerability in Ntfs Tool, classified under CWE-922. Published 2025-03-18.
Is CVE-2025-2489 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.