Samsung has published a security advisory after a high-severity vulnerability was discovered in its Magician SSD utility software on Windows. CVE‑2025‑57836 explains that this vulnerability is the result of the software installer creating “a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges.” The newest Samsung Magician software version 9.0.0 fixes this issue and comes with a complete UI/UX overhaul.

(Image credit: Samsung)

This vulnerability was reported to Samsung on August 11, last year, by cybersecurity professional Sandro Poppi. Affected versions of the Samsung Magician software include those from 6.3.0 to 8.3.2. That’s releases spanning 2021 almost to the present day. Samsung shared details of this ‘high severity’ vulnerability on Sunday, January 4, 2026.

CVE‑2025‑57836 implications

If you are using a version of Samsung Magician software older than the latest version 9.0.0 on Windows, you should upgrade. Samsung has implemented a major UI and UX update, which looks pretty cool and useful from the download page screenshots and details.

Earlier vulnerable versions should also be replaced as they suffer from the CVE‑2025‑57836 vulnerabilities. Specifically, an attacker with access to your computer as a normal user could use this vulnerability to become an administrator, the next time you run the Magician software.

They would do their dastardly deeds by replacing files in the Magician folder affected by weak access rights. Even a non-admin can replace files there, or add in malicious DLLs, that would be accessed by Magician upon its next run. Using this vector, it would be possible for the attacker to create new admin accounts, modify system files, the sky’s the limit…

Having warned of the above, this vulnerability might not particularly worry you if your computer is always kept in a secure location, and the only account is the password-protected admin one that you use.