Medium severity · published Dec 22, 2025
CVE-2025-8304
Information Disclosure in Identity Agent Registry Keys
6.5
CVSS
0.1%
EPSS
No
On KEV
Description
An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Identity Agent · checkpoint
Check Point Identity Agent Multi User Host Agent under version 81.084.0000 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8304
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8304
support.checkpoint.com
https://support.checkpoint.com/results/sk/sk184263
More from Identity Agent
8.1
CVE-2021-30356
A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files
7.8
CVE-2026-10847
Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
7.3
CVE-2024-24910
A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server