CVE-2025-40672CWE-732

Privilege Escalation in Panloader.exe

High · published May 26, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

A Privilege Escalation vulnerability has been found in Panloader component v3.24.0.0 by Espiral MS Group. This vulnerability allows any user to override the file panLoad.exe that will be executed by SYSTEM user via a programmed task. This would allow an attacker to obtain administrator permissions to perform whatever activities he/she wants, shuch as accessing sensitive information, executing code remotely, and even causing a denial of service (DoS).

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00158 · 4.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-05-26T09:05Z
EPSS history
Timeline
  • 26 MAY 09:05Z
    Privilege Escalation in Panloader.exe
    cvelistv5