CVE-2026-4793

An incorrect default permissions vulnerability in Synology Assistant prior to version 7.0.7-50095 allows local users to access and manipulate arbitrary files, potentially leading to data exposure or denial-of-service during installation. Organizations using affected versions should prioritize patching to mitigate risks associated with unauthorized file access and service disruption. Local users with access to the application are particularly at risk and should be monitored closely.