CVE-2022-50902CWE-91

Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path

High · published January 13, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

⚡ An unquoted service path could allow local users to execute code with elevated privileges! Sounds like a recipe for disaster, right? 🔥 Think of it like a restaurant that doesn’t double-check the name on a delivery order. If the chef mistakenly cooks up a surprise dish for a rogue delivery, who knows what could get served up? An attacker could gain LocalSystem permissions simply by exploiting this oversight, potentially taking full control of the system and wreaking havoc. Imagine a mischievous patron in a restaurant, not just tasting the food but deciding the entire menu! This could lead to unauthorized access to sensitive data or even complete system compromise.

Put simply

Think of it like a restaurant that doesn’t double-check the name on a delivery order. If the chef mistakenly cooks up a surprise dish for a rogue delivery, who knows what could get served up? The vulnerability resides in Wondershare FamiSafe's FSService, where an unquoted service path allows local users to inject malicious code during service startup, executing it with elevated privileges.

What to do

An attacker could gain LocalSystem permissions simply by exploiting this oversight, potentially taking full control of the system and wreaking havoc. Imagine a mischievous patron in a restaurant, not just tasting the food but deciding the entire menu! This could lead to unauthorized access to sensitive data or even complete system compromise. To safeguard your systems, immediately patch FamiSafe to the latest version. Additionally, ensure that any service paths are properly quoted to prevent unintentional code execution. Regularly audit your installed services for similar vulnerabilities. You've got this! With these steps, you can secure your system and join the ranks of security heroes! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00178 · 7.0th percentile
Weakness
CWE-91 · XML Injection (aka Blind XPath Injection)
Published
2026-01-13T22:51Z
EPSS history
Timeline
  • 13 JAN 22:51Z
    Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path
    cvelistv5