A flaw in the GFI Archiver MArc.Store.Remoting.exe process causes unvalidated, user-supplied data to be deserialized, which can lead to arbitrary code execution with SYSTEM privileges. The vulnerability is a serialization flaw (CWE‑502), allowing attackers to run any code on the host. The primary impact is complete compromise of the affected system’s confidentiality, integrity, and availability.

The issue targets the GFI Archiver product, specifically the 15.10 release as indicated by the CPE. Any installation of this version that exposes the MArc.Store.Remoting.exe process to external input is potentially vulnerable.

The vulnerability carries a CVSS score of 8.8, indicating high severity, but an EPSS score of less than 1% suggests low current exploitation likelihood. It is not listed in CISA’s KEV catalog. Exploitation requires remote network access and the ability to submit malformed data to the MArc.Store.Remoting.exe service. Although authentication is formally required, the existing mechanism can be bypassed, effectively allowing unauthenticated remote attackers to trigger the flaw under the assumptions described.