CVE-2025-1079

RCE In Google Web Designer

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

Affected

Google · Web Designer

CVSS v3.1 GOOGLE

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.16% chance of exploitation in the next 30 days, 4th percentile

Published

2025-05-12

Proof-of-concept exploits (1)

• https://balintmagyar.com/articles/google-web-designer-symlink-client-side-rce-cve-2025-10…

References

• CVE Record
• NVD entry