CVE-2026-110359: High severity Hyland Desktop Host for Windows vulnerability
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A local user with existing access to the affected Windows system can exploit the weak permissions on the privileged service's program directory to escalate privileges. Remote, unauthenticated exploitation is not indicated by the provided data.
Which installations are affected?
Hyland Desktop Host for Windows versions before 25.1.1 are affected. The issue involves the privileged service running from %PROGRAMDATA%\Hyland\DesktopHost\bin.
What can be done if upgrading is not immediately possible?
Restrict write access to %PROGRAMDATA%\Hyland\DesktopHost\bin so unprivileged local users cannot modify content used by the privileged service. This mitigation follows directly from the identified weak permissions, but the provided data does not specify an exact access-control configuration.