This vulnerability allows any local user to terminate arbitrary processes on a Windows system that runs Veeam Agent for Microsoft Windows. By sending a request to the agent, the attacker can kill any running process, potentially disrupting critical services or user sessions.

The affected product is Veeam Agent for Windows. No specific version information is listed. Any installation of this agent on a Windows machine is potentially vulnerable.

The CVSS score of 6.8 indicates a moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local; a local user with sufficient access can exploit this weakness. Because the flaw enables termination of any process, an attacker could disrupt services or facilitate later privilege escalation if critical processes are killed.