NI LabVIEW DLL Hijacking Vulnerability Allowing Arbitrary Code Execution

A DLL hijacking vulnerability has been identified in NI LabVIEW versions 2025 Q1 and prior. This vulnerability arises from an uncontrolled search path, which can be exploited by an attacker to execute arbitrary code. Successful exploitation requires the attacker to place a malicious DLL into the uncontrolled search path.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution.

Remediation

Users are advised to upgrade to LabVIEW 2025 Q1 Patch 2 or later. For deployed LabVIEW applications, the LabVIEW Run-Time Engine should also be patched.