CVE-2025-0733 | Postman up to 11.20 on Windows profapi.dll untrusted search path

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path.

This vulnerability is uniquely identified as CVE-2025-0733. An attack has to be approached locally. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.

The vendor was contacted early about this disclosure but did not respond in any way.