CVE-2025-24054 is a vulnerability in Microsoft Windows NTLM that involves external control of file name or path, enabling an unauthorized attacker to perform spoofing over a network. It affects multiple Windows versions prior to specific fixed releases. The vulnerability has been exploited in the wild and has a medium severity rating with a CVSS score of 6.5. Fixed versions have been released by Microsoft.