A high-severity local privilege escalation flaw in the Logitech Logi Options+ updater service enables unprivileged local users to gain full SYSTEM-level control over the affected Windows host.

This vulnerability involves improper privilege management within the Logi Options+ updater service. A low-privileged local user can exploit this service to execute arbitrary commands with SYSTEM-level permissions, bypassing standard security restrictions on the local machine.

The ability for a low-privileged user to escalate to SYSTEM privileges represents a critical risk to workstation and server security. An attacker who has achieved initial access to a device can leverage this flaw to install persistent malware, disable security software, or harvest sensitive credentials, resulting in a full system compromise. With a CVSS score of 8.5, the vulnerability demands immediate attention in environments where untrusted users have local login access.

Immediate Action: Update the Logitech Logi Options+ software to version 2.7.0 or later to apply the necessary security patches.

Proactive Monitoring: Monitor system logs for unexpected service restarts or unusual process spawning behavior originating from the Logi Options+ updater process.

Compensating Controls: Restrict local user account permissions where possible and ensure that endpoint detection and response tools are configured to alert on abnormal privilege escalation attempts.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up provided by AmberWolf.

Given the potential for complete system compromise via privilege escalation, IT administrators must prioritize the deployment of Logi Options+ version 2.7.0 across all managed Windows endpoints. Testing and deployment should occur immediately to eliminate this vector for lateral movement and persistence. Failure to patch this vulnerability leaves workstations exposed to simple yet highly effective privilege escalation attacks.