CVE-2025-50325 describes an authentication bypass vulnerability in BandiZip v7.37. The flaw enables remote attackers to circumvent the Mark-of-the-Web protection mechanism on affected installations. The Mark-of-the-Web is a security feature intended to indicate that a file originated from an untrusted source, typically the internet, and to trigger appropriate warnings or restrictions. This vulnerability undermines that mechanism, potentially exposing users to increased risk from malicious files. There is no CVSS score or detailed technical exploit information available, and no vendor advisory or patch information has been provided.

The vulnerability allows remote attackers to bypass the Mark-of-the-Web protection, which may lead to users unknowingly executing or opening files without receiving the usual security warnings. This could increase the risk of executing malicious content that would otherwise be flagged. However, no known exploits are reported in the wild, and the exact impact depends on how the Mark-of-the-Web feature is used in the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources and consider additional security controls to compensate for the bypassed Mark-of-the-Web protection.