PT-2026-34644 · Efficientlab · Controlio

Published

2026-04-23

·

Updated

2026-04-23

·

CVE-2025-10549

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITYSYSTEM.

Uncontrolled Search Path Element

Weakness Enumeration

Related Identifiers

CVE-2025-10549

Affected Products

Controlio