A race condition in the Privileged Helper Tool and insufficient file validation allow a local attacker to execute arbitrary code with system privileges. The flaw can be exploited without network access, giving the attacker full control of the affected machine, compromising confidentiality, integrity, and availability of data and services on that system.

Canimaan Software ClamXAV versions 3.3 through 3.11 are vulnerable. The issue was fixed in version 3.11.1; no other products or versions are affected according to the CNA data.

The CVSS score of 7.3 indicates a high severity local privilege escalation. EPSS is not available and the vulnerability is not listed in the KEV catalog, so the current exploitation probability is unknown but the risk remains significant for environments with unauthorised local users. The vulnerability requires local access; exploitation typically involves the attacker manipulating the helper tool’s race condition to gain super‑user rights on the host.