# CVE-2025-10918: Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local…

Source: https://junglewise.ai/threats/cve-2025-10918-insecure-default-permissions-in-the-agent-of-ivanti-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-11  
License: CC BY 4.0 with a link back

CVE-2025-10918 · Severity: high · CVSS 7.1 · Published 2025-11-11

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk

Technologies: [Ivanti Endpoint Manager](https://junglewise.ai/threats/technologies/endpoint-manager). Vendors: [Ivanti](https://junglewise.ai/threats/vendors/ivanti).

## Quick answers

**Is CVE-2025-10918 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-10918 being exploited in the wild.

**How severe is CVE-2025-10918?** High severity, with a CVSS score of 7.1, published 11 November 2025.

**Which products and versions are affected?** Ivanti Endpoint Manager. The advisory does not name versions.

**Is there a fix for CVE-2025-10918?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-10918?** Check whether you run Ivanti Endpoint Manager. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Ivanti Endpoint Manager

## Related threats

- [Ivanti Endpoint Manager Agent cleartext transmission of credentials](https://junglewise.ai/threats/cve-2026-18128-cleartext-transmission-of-sensitive-information-in-the-agent-of)
- [Ivanti Endpoint Manager SQL injection in Core](https://junglewise.ai/threats/cve-2026-121653-sql-injection-in-the-core-of-ivanti-endpoint-manager-before)
- [Ivanti Endpoint Manager SQL injection in web console](https://junglewise.ai/threats/cve-2026-8111-ivanti-endpoint-manager-sql-injection-in-web-console)
- [Ivanti Endpoint Manager privilege escalation in agent](https://junglewise.ai/threats/cve-2026-8110-ivanti-endpoint-manager-privilege-escalation-in-agent)
- [Ivanti Endpoint Manager exposed dangerous method in Core Server](https://junglewise.ai/threats/cve-2026-8109-ivanti-endpoint-manager-exposed-dangerous-method-in-core-server)