PT-2026-5418 · Outline · Outline Service

Published 2026-01-30 · Updated 2026-01-30 · CVE-2020-37030

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Outline Service version 1.3.3

Description Outline Service 1.3.3 contains an unquoted service path that could allow local users to execute arbitrary code with elevated system privileges. An attacker can exploit the unquoted binary path located at C:Program Files (x86)Outline to inject malicious code. This code would then execute with LocalSystem permissions when the service starts.

Recommendations Ensure the service path for Outline Service 1.3.3 is properly quoted to prevent potential code injection during service startup.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37030

Affected Products

Outline Service

References · 5

• 🔥 https://exploit-db.com/exploits/48414 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37030 · Security Note
• https://vulncheck.com/advisories/outline-service-outline-service-unquoted-service-path · Note
• https://t.me/CVEtracker/43305 · Telegram Post
• https://getoutline.org/vi/home · Note