The vulnerability arises when the Network and Security tool installs certificates into the Windows machine certificate store, granting the Operator group read access to the corresponding private key. This unnecessary permission potentially allows any user who belongs to the Operator group to retrieve the private key, which could enable unauthorized cryptographic operations such as forging messages or establishing secure connections as the certificate owner.

CODRA Panorama Suite version 25.00.004 (2025 release) running on Windows is impacted. Installations that have been updated to Panorama Suite 2025 Updated Dec. 25 (25.10.007) are no longer vulnerable.

The CVSS score of 3.3 indicates low severity, and the EPSS score of less than 1% suggests a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require local access to a Windows system and membership in the Operator group, meaning the attack vector is likely local.