Malwarebytes and Nebula Race Condition Vulnerability Leading to Code Execution

A race condition vulnerability allowing code execution has been identified in Malwarebytes versions prior to 4.6.14.326 and 5.1.5.116, as well as in the Nebula platform 2020-10-21 and later. The issue arises from a lack of synchronization between file verification and execution processes, creating a time-of-check/time-of-use vulnerability.

Impact

Exploitation of this vulnerability allows for unauthorized code execution on the affected system.

Remediation

Users are advised to upgrade to Malwarebytes versions 4.6.14.326 or later, 5.1.5.116 or later, or to the Nebula platform version available in June 2024. For Nebula, ensure the Endpoint Agent version is 2.0.0.64 or later and the Protection Service version is 4.6.17.334 or later.