A privilege escalation vulnerability in the Rockstar Games Launcher allows local authenticated users to execute arbitrary code with system privileges, potentially leading to a full system compromise.

The application suffers from an incorrect default permissions issue (CWE-276) where the RockstarService.exe binary is writable by the Authenticated Users group. An attacker with standard local user access can replace this executable with a malicious binary to achieve arbitrary code execution as a local administrator.

Successful exploitation grants an attacker full control over the local system, enabling the installation of malware, theft of sensitive credentials, or further lateral movement within the network. With a CVSS score of 8.8, this vulnerability represents a high-severity risk that could lead to significant operational disruption and data breach if an attacker gains a foothold on a machine running the affected launcher.

Immediate Action: Update the Rockstar Games Launcher to the latest version provided by the vendor to remediate the insecure file permissions.

Proactive Monitoring: Review local system logs for unexpected service restarts or modifications to binaries within the installation directory of the Rockstar Games Launcher.

Compensating Controls: Restrict local user permissions to prevent non-administrative users from modifying files within application directories, and employ Endpoint Detection and Response (EDR) solutions to flag unauthorized binary replacement attempts.

Public Exploit Available: Yes, a proof-of-concept exists in the Exploit Database (EDB-ID 49739).

Given the availability of a functional proof-of-concept and the high-severity nature of local privilege escalation, organizations should prioritize updating all instances of the Rockstar Games Launcher. Administrators must ensure that the service executable is protected by appropriate access control lists to prevent unauthorized modification, and immediately patch the software to eliminate the underlying permission flaw.