PT-2025-52839 · Epic Games · Easy Anti-Cheat

Published 2025-12-23 · Updated 2025-12-23 · CVE-2021-47739

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Epic Games Easy Anti-Cheat version 4.0

Description An unquoted service path exists in Epic Games Easy Anti-Cheat 4.0, potentially allowing local non-privileged users to execute arbitrary code with elevated system privileges. An attacker can exploit the service configuration by inserting malicious code into the system root path, which would then execute with LocalSystem privileges during application startup.

Recommendations Ensure the service path is properly quoted to prevent the execution of unauthorized code.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47739

Affected Products

Easy Anti-Cheat

References · 7

• 🔥 https://exploit-db.com/exploits/49841 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47739 · Security Note
• https://epicgames.com · Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2021-5652.php · Note
• https://easy.ac · Note
• https://twitter.com/CVEnew/status/2003567282019009007 · Twitter Post
• https://vulncheck.com/advisories/epic-games-easy-anti-cheat-local-privilege-escalation-via-unquoted-service-path · Note