BeyondTrust Privilege Management for Windows COM Object Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in BeyondTrust Privilege Management for Windows, affecting versions prior to 25.2. This vulnerability allows local authenticated attackers to elevate privileges by manipulating COM objects under certain conditions where an EPM policy permits automatic privilege elevation of a user process.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected system.