ONLYOFFICE DesktopEditors Privilege Escalation Vulnerability in Update Service

A vulnerability in the update service of ONLYOFFICE DesktopEditors versions prior to 9.3.0 allows attackers to perform actions on files with SYSTEM privileges. This issue could be exploited to manipulate files or data at a high privilege level, potentially leading to unauthorized changes or access.

Impact

Exploitation of this vulnerability could result in unauthorized actions being performed on files with SYSTEM privileges, allowing for significant manipulation or access to sensitive data or functions.

Remediation

Users can update to ONLYOFFICE DesktopEditors version 9.3.0 or later, where this vulnerability has been fixed.