CVE-2025-43491CWE-99

Poly Lens Desktop Application – Privilege Escalation

High · published September 9, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

⚡ One small misstep in the Poly Lens Desktop app could turn into a giant leap for attackers, granting them SYSTEM level privileges! Think of it like a hotel guest finding a way to sneak into the manager's office. With a careless door left ajar, they could access the master key to every room—potential chaos! An attacker exploiting this vulnerability could modify critical files and gain full control over the system, leading to devastating consequences such as data theft or unauthorized access to sensitive information. This isn’t just a minor inconvenience; it could mean total system compromise!

Put simply

Think of it like a hotel guest finding a way to sneak into the manager's office. With a careless door left ajar, they could access the master key to every room—potential chaos! This vulnerability allows modifications to the filesystem within the Poly Lens Desktop application, which can escalate privileges to SYSTEM level, leaving the door wide open for malicious actions.

What to do

An attacker exploiting this vulnerability could modify critical files and gain full control over the system, leading to devastating consequences such as data theft or unauthorized access to sensitive information. This isn’t just a minor inconvenience; it could mean total system compromise! Patch the Poly Lens Desktop application immediately to the latest version to close this security gap. Additionally, audit the permissions and configurations to ensure they are not vulnerable to similar exploits in the future. You've got this! Follow these steps and you'll be well on your way to securing your systems. 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')
Published
2025-09-09T20:29Z
EPSS history
Timeline
  • 09 SEP 20:29Z
    Poly Lens Desktop Application – Privilege Escalation
    cvelistv5