The vulnerability in CPSD CryptoPro Secure Disk for Bitlocker prior to version 7.7.4 involves a default TPM PCR policy that fails to validate the system boot state. This flaw permits the TPM to be unsealed either via an unintended execution path or from another hardware platform, potentially undermining the security guarantees of the TPM-based disk encryption. The vulnerability is documented as CVE-2025-59321. There is no CVSS score or vendor advisory available to confirm patch status or detailed impact.

This vulnerability could allow unauthorized unsealing of the TPM, potentially exposing encrypted disk contents or cryptographic keys protected by the TPM. The failure to consider the system boot state weakens the trust model of the TPM, possibly enabling attackers with physical access or control over hardware to bypass protections. However, no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No vendor advisory or patch information is currently provided.