Report: Essential Guide: CVE-2025-10549 - DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation

Report: Essential Guide: CVE-2025-10549 - DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation

CVE ID :CVE-2025-10549 Published : April 23, 2026, 7:16 a.m. | 14 minutes ago Description :EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
April 23, 2026
Attack Vector: local
Impact: code execution