# CVE-2025-61970: AMD Vitis Unified weak installation permissions

Source: https://junglewise.ai/threats/cve-2025-61970-amd-vitis-unified-weak-installation-permissions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2025-61970 · Severity: info · Published 2026-08-11

AMD Vitis Unified, a development tool for hardware and software co-design, contains weak file permissions in its Windows installation directory. A low-privileged user on the same machine could exploit this to write malicious code into the installation path, potentially hijacking executable binaries and gaining elevated privileges or executing arbitrary code.

Technologies: [Amd Vitis Unified](https://junglewise.ai/threats/technologies/vitis-unified). Vendors: [Amd](https://junglewise.ai/threats/vendors/amd).

## Quick answers

**Is CVE-2025-61970 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-61970 being exploited in the wild.

**How severe is CVE-2025-61970?** Informational severity, published 11 August 2026.

**Which products and versions are affected?** AMD Vitis Unified.

**Is there a fix for CVE-2025-61970?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-61970 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2025-61970?** Check whether you run Amd Vitis Unified. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a privilege escalation issue stemming from improper file system permissions on the Vitis Unified installation directory on Windows. A low-privileged local user can create or modify files within the installation path due to overly permissive directory access controls. An attacker can leverage this to perform binary hijacking—replacing legitimate executables or libraries with malicious versions that execute when invoked by a higher-privileged process or user. The attack requires local access to the Windows machine where Vitis Unified is installed.

## Affected products

- AMD Vitis Unified

## Timeline

- 2026-08-11: disclosed

## References

- [https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html](https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html)

## Related threats

- [AMD Vitis Unified DLL injection via uncontrolled search path](https://junglewise.ai/threats/cve-2025-48506-amd-vitis-unified-dll-injection-via-uncontrolled-search-path)
- [AMD Vitis Unified weak permissions privilege escalation](https://junglewise.ai/threats/cve-2025-48505-amd-vitis-unified-weak-permissions-privilege-escalation)