DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service)

A local attacker could exploit a DLL hijacking vulnerability in the Controlio monitoring service to execute commands as NT Authority\SYSTEM and thereby escalate privileges on the system.

CVE-2025-10549

 

Read the full post here (s'ouvre dans un nouvel onglet)