Description

EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.

INFO

Published Date :

2026-04-23T06:57:27.220Z

Last Modified :

2026-04-23T06:57:27.220Z

Source :

SEC-VLab
AFFECTED PRODUCTS

The following products are affected by CVE-2025-10549 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-10549.

CVSS Vulnerability Scoring System