Security News Warning: iVentoy 1.0.2 installs obscure certificates and drivers

[Gandalf_The_Grey]

Content source

https://borncity.com/win/2025/05/07/warning-iventoy-1-0-2-installs-obscure-certificates-and-drivers/

A short warning to blog readers who use the iVentoy tool to distribute operating system images via a network and a PXE server. There is currently a discussion that the tool (currently version 1.0.2) installs an insecure kernel driver and an obscure certificate under Windows. As long as this point has not been properly clarified, I can only advise you to "keep your hands off this tool". Addendum: The developer has already reacted and released version 1.0.21.

Take care when using (also Ventoy)

At this point I would say "be careful, using iVentoy" – and also Ventoy (which contains also blobs) in older versions. Shortly, after I've published the German edition of this blog post, iVentoy 1.0.21 has been released. The iVentoy developer has released an official statement about the above suspicions

Warning: iVentoy 1.0.2 installs obscure certificates and drivers

[German]A short warning to blog readers who use the iVentoy tool to distribute operating system images via a network and a PXE server. There is currently a discussion that the tool (currently version…

borncity.com

iVentoy installing unsafe Windows Kernel drivers · Issue #106 · ventoy/PXE

iVentoy installing unsafe Windows Kernel drivers iVentoy https://github.com/ventoy/PXE/releases iventoy-1.0.20-linux-free.tar.gz, iventoy-1.0.20-win32-free.zip, iventoy-1.0.20-win64-free.zip All th...

github.com