NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in NoMachine. This issue arises because the NoMachine Device Server loads a library from an unsecured location, allowing local attackers who can execute low-privileged code to escalate privileges and execute arbitrary code with SYSTEM rights.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an attacker to execute code with SYSTEM privileges.

Remediation

Users can upgrade to NoMachine version 9.4.14 to address this vulnerability.