ZDI-CAN-26766: ZDI-25-835: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-8614.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26766?
The severity of ZDI-CAN-26766 is rated at 7.8 on the CVSS scale.
What impact does ZDI-CAN-26766 have on NoMachine installations?
ZDI-CAN-26766 allows local attackers to escalate privileges on affected NoMachine installations.
How can I exploit ZDI-CAN-26766?
An attacker must first execute low-privileged code on the target system to exploit ZDI-CAN-26766.
What are the first steps to mitigate ZDI-CAN-26766?
To mitigate ZDI-CAN-26766, ensure that all installations of NoMachine are updated to the latest version.
Are there any prerequisites for exploiting ZDI-CAN-26766?
Yes, an attacker must have the ability to execute low-privileged code on the target system prior to exploiting ZDI-CAN-26766.