CVE-2025-53378
A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53378?
CVE-2025-53378 has a critical severity rating due to the potential for unauthorized remote control of the affected Trend Micro WFBSS agent.
How do I fix CVE-2025-53378?
To fix CVE-2025-53378, update your Trend Micro Worry-Free Business Security Services agent to the latest version provided by Trend Micro.
Which versions are affected by CVE-2025-53378?
CVE-2025-53378 affects the SaaS client version of Trend Micro Worry-Free Business Security Services.
Can CVE-2025-53378 be exploited remotely?
Yes, CVE-2025-53378 can be exploited remotely by an unauthenticated attacker.
What impact does CVE-2025-53378 have on my security?
CVE-2025-53378 could allow an attacker to take full control of the Trend Micro WFBSS agent, posing a significant security risk.