CVE-2021-47882CWE-428

FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path

High · published January 21, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

🚨 Guess what? An unquoted service path vulnerability in FreeLAN 2.2 means local attackers can play puppet master with arbitrary code execution! 🔥 Think of this like a restaurant that never checks the delivery label on its food supplies — anyone could sneak in a package of mystery meat that gets cooked without a second thought! 🍽️ If an attacker gets in, they could launch malicious executables with LocalSystem privileges, which is basically the keys to the castle! This means they can read sensitive data, modify configurations, or even take over the system entirely. The consequences could be absolutely devastating!

Put simply

Think of this like a restaurant that never checks the delivery label on its food supplies — anyone could sneak in a package of mystery meat that gets cooked without a second thought! 🍽️ The unquoted service path vulnerability lets local attackers exploit the service configuration to inject malicious executables that run with high-level privileges when the service starts up.

What to do

If an attacker gets in, they could launch malicious executables with LocalSystem privileges, which is basically the keys to the castle! This means they can read sensitive data, modify configurations, or even take over the system entirely. The consequences could be absolutely devastating! To protect yourself, update FreeLAN to the latest version and ensure all service paths are quoted correctly in the configuration. Regularly audit your local services to catch any potential misconfigurations. 🛡️ You've got this! Follow these steps to shield your systems, and you'll be a security hero in no time! 💪✨

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00164 · 5.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path
    cvelistv5