This vulnerability involves an uncontrolled search path element in Synology Presto Client before version 2.1.3-0672. During installation, a local user can place a malicious DLL in the same directory as the installer; the client may load that DLL, allowing the user to read or write arbitrary files and potentially cause denial‑of‑service. The flaw is identified by CWE‑427, indicating a path traversal risk.

Synology Presto Client applications older than version 2.1.3-0672, including all builds released prior to that version, are vulnerable.

The CVSS score is 6.7 (medium), and the EPSS score is less than 1%, indicating a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access; the attacker must be able to execute the installer and place a malicious DLL in its directory, which could allow arbitrary file read/write and potentially trigger a denial‑of‑service during installation. Given the local requirement and low EPSS, the overall risk remains moderate but warrants mitigation.