## Summary
CVE-2025-59326 describes a security weakness in CPSD CryptoPro Secure Disk for Bitlocker (before v7.7.4) where IMA policy protections are not enforced across temporary file systems. This can allow unsigned code to be executed from those locations.
## Technical Details
- The issue is specifically about failure to enforce IMA policy protections across temporary file systems.
- When IMA enforcement is missing in these temp locations, the system may permit execution of unsigned code from them.
- The weakness is mapped to CWE-693.
## Affected
- CPSD CryptoPro Secure Disk for Bitlocker versions before v7.7.4.
## Impact
- High impact on confidentiality, integrity, and availability is indicated by the provided CVSS vector (C:H/I:H/A:H).
- The primary risk is execution of unsigned code from temporary file system locations, which can lead to compromise.
## Mitigation
1. Upgrade CPSD CryptoPro Secure Disk for Bitlocker to v7.7.4 or later to restore proper IMA policy enforcement.
2. If immediate upgrade is not possible, restrict or harden usage of temporary file systems where unsigned execution could occur, and review endpoint hardening controls around temporary execution paths.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-693