CVE-2025-10549

DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation

State: Published
Severity: 5.1 Medium
Published: Apr 23, 2026
Updated: Apr 29, 2026
Reserved: Sep 16, 2025

Description

EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.

Scores

CVSS	Score	Vector	Source
3.1	5.1 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N	CISA-ADP

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
ControlioEfficientLab, LLC	<1.3.95Affected

References

https://r.sec-consult.com/controliothird-party-advisory
https://kb.controlio.net/hc/en-us/articles/45777908471185-Client-Update-April-15-2026-ver-1-3-95release-notes
http://seclists.org/fulldisclosure/2026/Apr/19

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.