A critical privilege escalation vulnerability in Vienna Assistant allows local attackers to gain elevated system permissions and execute arbitrary code due to missing client authentication.

This is a missing authentication for critical function (CWE-306) flaw. The privileged helper tool fails to validate incoming NSXPC connections, permitting any local user to invoke sensitive functions like writeReceiptFile and runUninstaller.

The lack of authentication in the privileged helper tool enables local privilege escalation. An attacker with minimal access could achieve full control over the system, leading to unauthorized data modification, persistence, or complete system compromise. With a CVSS score of 8.8, this vulnerability represents a high risk that could lead to severe organizational data loss or service disruption.

Immediate Action: As there is no official patch available, administrators should immediately restrict access to the affected system or uninstall the software until the vendor provides a secure update.

Proactive Monitoring: Monitor system logs for unauthorized execution of the Vienna Assistant helper process or unexpected file write operations in sensitive system directories.

Compensating Controls: Implement strict endpoint controls to prevent unauthorized local processes from executing, and ensure that the principle of least privilege is strictly enforced for all user accounts on the host machine.

Public Exploit Available: Yes, a published proof of concept exists, as documented in the technical writeup referenced by the CVE record (https://r.sec-consult.com/vsl).

Given the vendor's lack of responsiveness and the existence of a public proof of concept, this vulnerability poses a significant risk to any environment running Vienna Assistant. We strongly recommend removing the software from production systems until a verified security patch is released and confirmed to address the underlying authentication flaw.