A local privilege escalation vulnerability in Hotspot Shield 6.0.3 allows attackers to execute arbitrary code with system-level permissions by exploiting an unquoted service path.

The application utilizes an unquoted service path for the hshld service binary, which allows a local attacker to escalate privileges. By placing a malicious executable within the service path, the attacker can cause the system to execute the payload with LocalSystem privileges upon a service restart or system reboot.

Successful exploitation of this vulnerability grants a local attacker full administrative control over the affected machine. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to complete system compromise, unauthorized data access, and the potential for lateral movement within the network.

Immediate Action: Update Hotspot Shield to the latest available version provided by the vendor to resolve the service path configuration. If an update is not immediately available, administrators should manually quote the service path in the Windows Registry for the hshld service.

Proactive Monitoring: Monitor system logs for unauthorized file creation within the C:\Program Files\ directory structure and audit service configuration changes.

Compensating Controls: Implement strict file system permissions to prevent low-privileged users from writing files to the application directory.

Public Exploit Available: Yes, a proof-of-concept exploit is available via ExploitDB (EDB-ID: 40528).

This vulnerability presents a significant risk to local system integrity. Security teams should prioritize identifying all instances of Hotspot Shield 6.0.3 within their environment and apply the necessary patches or configuration hardening immediately to prevent unauthorized privilege escalation.