The vulnerability originates from an uncontrolled search path in the OpenSSL library embedded in Illumio VEN for Windows. A local attacker with low‑privileged authentication can place a malicious OpenSSL configuration file that the application will locate and parse, allowing execution of arbitrary code. This results in the attacker obtaining SYSTEM privileges, giving complete control of the host.

Illumio Core VEN for Windows is affected; no specific product versions are listed, so all current releases should be considered vulnerable until a vendor update is issued.

The CVSS score of 7.8 indicates a high severity. Exploitation requires local access, but the attack would elevate privileges to SYSTEM. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting that no widespread exploitation has occurred so far. Nevertheless, the risk remains significant for environments where low‑privileged users coexist with the VEN service.