Trellix OpenSSL Library Loading Vulnerability Leading to Privileged Code Execution

A vulnerability exists allowing locally authenticated, privileged users to create a malicious OpenSSL configuration file. This file can cause the agent to load an arbitrary local library, potentially disrupting endpoint defenses and enabling the attacker to execute code with SYSTEM-level privileges.

Impact

Exploitation of this vulnerability could result in unauthorized code execution with SYSTEM-level privileges, bypassing endpoint defenses.