A critical DLL hijacking vulnerability in the OM Workspace installer for Windows allows for arbitrary code execution, posing a significant risk to local system integrity.

The software suffers from an uncontrolled search path element (CWE-427), where the installer insecurely loads Dynamic Link Libraries. This flaw can be triggered by an attacker if a user is induced to execute the installer while a malicious library is present in the search path.

Successful exploitation of this vulnerability allows an attacker to achieve arbitrary code execution on the local machine with the privileges of the invoking user. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to full system compromise, unauthorized data access, or the deployment of persistent malware within the corporate environment.

Immediate Action: Upgrade to the latest version of OM Workspace released by OM Digital Solutions Corporation, which addresses the insecure DLL loading behavior.

Proactive Monitoring: Review endpoint security logs for unexpected process execution originating from the installation directory or suspicious file creation events in directories where the installer is executed.

Compensating Controls: Ensure that users have restricted permissions on local machines and utilize application whitelisting or endpoint detection and response tools to block unauthorized DLL loading attempts.

Public Exploit Available: No (exploit_available: false).

Organizations should prioritize updating the OM Workspace software across all Windows endpoints to eliminate this vulnerability. Security teams must enforce strict control over local administrative privileges and ensure that software installations are only performed from trusted, secure locations to minimize the risk of malicious DLL loading.