EquiTriton contains an uncontrolled search path flaw that can cause applications running in user mode to load malicious binaries if the environment path is manipulated. This flaw has the potential to allow an unprivileged local software adversary to elevate privileges to a privileged user, thereby compromising confidentiality, integrity, and availability of the affected system. The vulnerability is classified as CWE-427 and may lead to full control over the system when combined with a privileged account.

The affected product is EquiTriton, version releases prior to the code commit f5ddbb5. Systems running any older build of EquiTriton are susceptible once an untrusted input can influence the search path. Only the pre‑f5ddbb5 builds are impacted, and no later versions are known to contain the flaw.

The CVSS score of 5.4 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in CISA KEV. An attacker would need local access, a user interaction that permits them to influence the search path, and a privileged user account to carry out the attack, making it a low‑complexity local privilege escalation scenario. The likely attack vector is local access, inferred from the description.