The vulnerability is an origin validation flaw in the TrendAI Apex One agent that allows a local attacker who can already execute low‑privileged code to increase their privileges on the affected installation. The flaw is a classic origin trust boundary violation (CWE‑346) that enables an attacker to bypass process protections and gain higher level access, potentially compromising system integrity and data confidentiality.

Affected products include Trend Micro TrendAI Apex One and TrendAI Apex One as a Service. The documented affected versions are 14.0.0.17079 for the on‑premises agent and 14.0.0.20731 for the SaaS deployment, as listed in the vendor's advisory.

The CVSS score of 7.8 categorizes the issue as high severity. Exploitation requires local code execution to serve as a foothold, making it a local privilege escalation vector. The EPSS score is not available, and the vulnerability is not currently listed in CISA's KEV catalog, indicating no known widespread active exploitation yet. Nonetheless, the high impact warrants prompt remediation.