An origin validation error in Trend Micro Apex One permits a local attacker to elevate privileges on affected installations. The flaw arises when the software fails to properly validate the origin of certain inputs, allowing malicious content to be accepted without verification. The result is a potential privilege escalation that could enable the attacker to run higher‑privileged code or access sensitive resources.

Trend Micro Apex One, including the on‑premises version (14.0.0.14136) and the SaaS edition (14.0.0.20315).

The CVSS score of 7.8 indicates a high severity, while the EPSS score is not available and the vulnerability is not listed in CISA KEV. A local code execution capability is required as prerequisite; thus the likely attack vector is a local one. Once the attacker obtains low‑privileged code execution, exploiting the missing origin validation can raise his privileges, potentially exposing the entire system to further compromise. The absence of a publicly disclosed exploit does not preclude use by advanced adversaries leveraging the local execution step.