PT-2026-2421 · Outline · Outline

Milad Karimi · Published 2026-01-13 · Updated 2026-02-02 · CVE-2023-54331

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Outline version 1.6.0

Description The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted service path in the OutlineService executable, which could allow injection of malicious code to be executed with LocalSystem permissions.

Recommendations Apply appropriate quoting to the service path for the OutlineService executable.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2023-54331

Affected Products

Outline

References · 7

• 🔥 https://exploit-db.com/exploits/51128 · Exploit
• https://osv.dev/vulnerability/CVE-2023-54331 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54331 · Security Note
• https://vulncheck.com/advisories/outline-unquoted-service-path · Note
• https://getoutline.org · Note
• https://twitter.com/CVEnew/status/2011383043047543060 · Twitter Post
• https://t.me/cveNotify/150599 · Telegram Post