A privilege chaining flaw appears in ServerView Agents for Windows V11.60.04 and earlier. A local authenticated user who can log into the host can exploit this weakness to elevate their privileges to SYSTEM. The vulnerability is a CWE‑268 weakness, allowing unrestricted access to kernel level resources once abused. The impact is a full compromise of the affected machine, permitting execution of arbitrary code, data exposure, or further lateral movement within the network.

Servers that run ServerView Agents for Windows version 11.60.04 or older. All installations of the product on Windows hosts fall within the scope of the vulnerability.

The CVSS score of 8.5 indicates high severity. No EPSS data is available, and the vulnerability is not listed in CISA’s KEV catalog. Because the exploit requires a local authenticated user, the attack vector is limited to the local environment; however, once gained, SYSTEM privilege gives the attacker complete control over the system. The high availability of local accounts on many facilities makes this risk tangible if the agent is not patched.