A local privilege escalation vulnerability in Radarr 5.28.0.10274 allows authenticated local users to manipulate service permissions, posing a significant risk to system integrity.

This vulnerability stems from incorrect default permissions and improper privilege assignment within the Radarr.Console.exe file. The flaw requires an attacker to have local access to the environment to exploit the service configuration.

The exploitation of this vulnerability could allow a local user to gain unauthorized elevated privileges on the host system. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to full system compromise, unauthorized data access, or the execution of malicious code with administrative rights.

Immediate Action: As no official patch is currently available, restrict local user access to the Radarr installation directory and the associated service executable. Audit existing local user permissions to ensure that only authorized service accounts have access to modify the service binary.

Proactive Monitoring: Monitor system logs for unauthorized attempts to modify service configurations or unexpected privilege escalation events. Review logs associated with the Radarr service for unusual activity originating from local user accounts.

Compensating Controls: Implement strict file system permissions (Access Control Lists) on the Radarr installation folder to prevent unauthorized modification by low-privileged users. Utilize Endpoint Detection and Response (EDR) solutions to alert on suspicious process execution patterns related to service manipulation.

Public Exploit Available: Unknown.

Due to the lack of a vendor-provided patch, organizations must prioritize hardening the host environment hosting the Radarr service. Restricting access to the installation directory is the most effective temporary measure to prevent local attackers from abusing these incorrect permissions until a formal security update is released.