The vulnerability in RayVentory Scan Engine permits an attacker who can manipulate the PATH environment variable to gain elevated privileges during a scan operation. When PATH is altered, the engine may resolve and execute binary files from unintended directories, potentially allowing execution of arbitrary code. This flaw is categorized as a privilege escalation through environment variable manipulation and improper path handling (CWE-427). The description explicitly states that privilege escalation is possible if the attacker controls the PATH environment.

RayVentory Scan Engine versions through 12.6 Update 8 are vulnerable. The issue arises within the scanning component that resolves executables via the PATH variable. No newer releases are listed as affected.

The CVSS score of 9.8 indicates a severe flaw, but the EPSS score of <1% and the absence from CISA KEV suggest a low likelihood of public exploitation. Exploitation requires the attacker to influence or set the PATH variable in the environment where the scan engine runs, which is a site‑specific configuration problem. Therefore, the risk is high only if such a misconfiguration exists; otherwise the threat remains relatively contained. The potential attack vector is local or configuration‑based rather than remote, and no evidence of widespread external exploitation is present in the current data.