ZDI-25-835: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-8614.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-835?
ZDI-25-835 has been assigned a CVSS rating of 7.8, indicating high severity.
How do I fix ZDI-25-835?
To fix ZDI-25-835, update your NoMachine installation to the latest patched version provided by the vendor.
Who is affected by ZDI-25-835?
ZDI-25-835 affects installations of NoMachine that are running vulnerable versions.
What type of attack leverages ZDI-25-835?
ZDI-25-835 can be exploited by local attackers to escalate their privileges on the affected system.
What must an attacker do to exploit ZDI-25-835?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-25-835.