Kong Insomnia Untrusted Search Path Vulnerability in profapi.dll

A critical vulnerability has been identified in Kong Insomnia versions prior to 10.3.0, related to an untrusted search path issue in the profapi.dll library. This vulnerability requires local exploitation and is characterized by a high complexity, making it difficult to exploit. Currently, the existence of this vulnerability is under question, as the vendor has been unable to reproduce the issue.

Impact

Exploitation of this vulnerability could lead to local privilege escalation by manipulating the search path to load malicious libraries.