A local privilege escalation vulnerability in DiskBoss Service 12.2.18 permits unauthorized users to gain system-level execution rights.

The application utilizes an unquoted service path for its binary configuration. A local attacker can exploit this by placing a malicious executable in the directory path, causing the service to execute the attacker-controlled file with elevated system privileges upon restart.

Successful exploitation of this flaw allows a local user to compromise the integrity and availability of the host system. By gaining system-level access, an attacker could install persistent malware, modify sensitive system files, or exfiltrate data, leading to severe operational disruption and potential data breaches. The CVSS score of 7.8 reflects the high severity of achieving full system control from a local context.

Immediate Action: Update to a version of DiskBoss Service that resolves the unquoted service path configuration. If an update is not immediately available, administrators should manually quote the service path in the Windows Registry to prevent the hijacking of the execution flow.

Proactive Monitoring: Monitor system logs for unauthorized file creation within the C:\Program Files\ directory structure, specifically looking for unexpected executables.

Compensating Controls: Restrict write permissions on the affected installation directories to prevent low-privileged users from placing malicious files in the binary search path.

Public Exploit Available: Yes, a technical write-up and proof-of-concept are available via ExploitDB (EDB-ID: 49899).

The reliance on an unquoted service path represents a significant security oversight that exposes the host to complete compromise. IT administrators must prioritize hardening the service configuration or applying vendor-provided patches immediately to prevent unauthorized privilege escalation.