PT-2026-5395 · Eset · Eset Inspect Connector

Published 2026-01-30 · Updated 2026-02-20 · CVE-2025-13176

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ESET Inspect Connector versions prior to 3.0.5765

Description The ESET Inspect Connector is susceptible to a local privilege escalation. Planting a custom configuration file allows the loading of a malicious DLL. The ElConnector.exe process, running with SYSTEM privileges, attempts to load an OpenSSL configuration file from a user-writable path. A low-privileged user can create this file, leading to the execution of arbitrary code with elevated privileges.

Recommendations Update ESET Inspect Connector to version 3.0.5765 or later.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-13176

Affected Products

Eset Inspect Connector

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2025-13176 · Security Note
• https://twitter.com/ksg93rd/status/2024522163496120449 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1r9sfwr/top_10_trending_cves_20022026 · Reddit Post
• https://twitter.com/InfoGuard_Labs/status/2023773030292365380 · Twitter Post
• https://t.me/CVEtracker/43280 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1r80265/top_10_trending_cves_18022026 · Reddit Post
• https://support.eset.com/en/ca8910-eset-customer-advisory-local-privilege-escalation-vulnerability-fixed-in-eset-inspect-connector-for-windows · Note
• https://t.me/cveNotify/150388 · Telegram Post
• https://twitter.com/autumn_good_35/status/2024435095294390484 · Twitter Post
• https://twitter.com/CVEnew/status/2017220919320772827 · Twitter Post
• https://twitter.com/co11ateral/status/2024054030339625352 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1r8wba2/top_10_trending_cves_19022026 · Reddit Post
• https://twitter.com/autumn_good_35/status/2018338689454342404 · Twitter Post
• https://t.me/proxy_bar/3151 · Telegram Post