CVE-2020-37160CWE-276

SprintWork 2.3.1 - Local Privilege Escalation

High · published February 6, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain complete system access.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-02-06T23:14Z
EPSS history
Timeline
  • 06 FEB 23:14Z
    SprintWork 2.3.1 - Local Privilege Escalation
    cvelistv5