This vulnerability involves files or directories being accessible to external parties due to an issue in the redis-server component within Synology BeeDrive for desktop prior to version 1.3.2-13814. It enables local users to perform denial-of-service attacks through unspecified methods. The CVSS 3.1 base score is 6.8, reflecting medium severity with local attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No patch or official remediation level has been provided by the vendor yet.

The vulnerability allows local attackers to cause denial-of-service conditions, impacting the availability of the affected system. There is no impact on confidentiality, and only a low impact on integrity is noted. No known exploits are reported in the wild, limiting immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to the affected systems to trusted personnel only and monitor for unusual service disruptions related to BeeDrive or redis-server components.