Synology Hyper Backup Explorer contains a flaw where inclusion of functionality from an untrusted control sphere in the MinGW DLL component allows local users to execute arbitrary code. The vulnerability is classified as a failure to restrict or deactivate functionality (CWE-829), giving an attacker the ability to run malicious code with the privileges of the local user. This can compromise the integrity and confidentiality of the system, potentially leading to full system compromise if the user has elevated rights.

Versions of Synology Hyper Backup Explorer older than 3.0.1-0156 are affected. Users running the seized MinGW DLL component are at risk. The issue does not affect other Synology products directly, only the Hyper Backup Explorer application.

The CVSS score of 7.8 indicates high severity, while the EPSS score is not provided, suggesting insufficient publicly available data on exploitation frequency. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is local, requiring that the attacker have local user access to the system. If such access is obtained, arbitrary code execution can occur without additional network exploitation.