CVE-2025-10549

DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation

View on CVE.org
Published Apr 23, 2026 CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Description
EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.

Analysis

AI-generated

Technical impact

The flaw is a DLL hijacking weakness in EfficientLab Controlio versions prior to 1.3.95. Weak permissions on the installation directory allow a local user to drop a malicious DLL, which the privileged service loads, leading to execution of attacker code with the SYSTEM account. This gives full control of the machine.

Affected Systems

EfficientLab, LLC Controlio software installations running on Windows where the installation folder has insecure permissions. Versions before v1.3.95 are affected; the vendor recommends applying patch v1.3.95.

Risk and Exploitability

The CVSS base score of 5.1 indicates a moderate severity risk, and the very low EPSS score of less than 1% suggests it is unlikely to be actively exploited in the wild. The vulnerability is not listed in the CISA KEV catalog. Attackers must have local access to the machine and write permission to the installation directory to succeed.

Remediation

Vendor Solution

The vendor provides a patch v1.3.95 which should be installed immediately.

OpenCVE Recommended Actions

  • Install the vendor‑provided patch v1.3.95 as soon as possible.
  • Update the folder permissions on the Controlio installation directory to deny write access to non‑admin accounts.
  • Ensure the Controlio service runs with the least privilege necessary; if possible remove SYSTEM rights.

Generated by OpenCVE AI on April 28, 2026 at 14:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
References
Type Values Removed Values Added
First Time appeared Efficientlab
Efficientlab controlio
Vendors & Products Efficientlab
Efficientlab controlio
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.
Title DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation
Weaknesses CWE-427
References
Weaknesses
  • CWE-427

    Uncontrolled Search Path Element

Sources

Status
PUBLISHED
Assigner
SEC-VLab
Published
Updated
Apr 29, 2026, 7:32 PM
Reserved
Sep 16, 2025, 11:59 AM

View source JSON

Updated
Apr 29, 2026, 7:32 PM

JSON

Status
Deferred
Published
Apr 23, 2026, 7:16 AM
Modified
Oct 7, 2026, 9:10 AM

View source JSON

No data.

Updated
Apr 28, 2026, 3:00 PM

JSON