A local privilege escalation vulnerability exists in Disk Savvy 13.6.14 due to an unquoted service path, which permits an attacker to execute malicious code with system-level permissions.

The application utilizes an unquoted service path for its Windows services (Disk Savvy Server and Disk Savvy Enterprise). An attacker with local access can place a malicious executable in the path to hijack the service startup process and gain elevated LocalSystem privileges.

Successful exploitation of this vulnerability allows a local attacker to gain full control over the affected system. Given the CVSS score of 7.8, this represents a high-severity risk, as the compromise of LocalSystem privileges typically leads to complete data exposure, malware persistence, and the potential for lateral movement across the network.

Immediate Action: As no official patch is currently confirmed for this specific version, administrators should restrict file system permissions on the affected directories to prevent unauthorized users from placing malicious binaries in the service path.

Proactive Monitoring: Review Windows System event logs for service startup failures or unexpected binary execution patterns associated with the Disk Savvy service paths.

Compensating Controls: Implement strict Access Control Lists (ACLs) on the C:\Program Files directory to ensure that only authorized administrators can create or modify files within the Disk Savvy installation folders.

Public Exploit Available: Yes — a public proof-of-concept is documented in the Exploit Database (EDB-ID 50024).

Given the availability of a public proof-of-concept and the high-severity impact of privilege escalation, immediate mitigation is required. Organizations using Disk Savvy 13.6.14 should apply file system hardening to the service directories and prioritize upgrading to the latest version if a secure release is provided by the vendor.