Threat Advisories:
🎧 Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report
👥 Play Count: Loading...

CVE-2025-49144: A Silent Shortcut to SYSTEM Privileges in Notepad++

Red | Attack Report
Download PDF
A newly disclosed vulnerability, CVE-2025-49144, affects the Notepad++ installer and could allow attackers to gain full control of a system. The flaw enables malicious actors to place a harmful file in the same directory as the installer, typically the ‘Downloads’ folder, which can be leveraged during installation to compromise the machine. This issue is addressed in Notepad++ version 8.8.2, and users are strongly advised to update to the latest fix to stay protected.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox