PT-2026-2421
CVE-2023-54331
·
Published
2026-01-13
·
Updated
2026-02-02
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Outline version 1.6.0
Description
The software contains an unquoted service path, potentially allowing local attackers to execute arbitrary code with elevated system privileges. Exploitation involves the unquoted service path in the
OutlineService executable, which could allow injection of malicious code to be executed with LocalSystem permissions.Recommendations
Apply appropriate quoting to the service path for the
OutlineService executable. Found an issue in the description? Have something to add? Feel free to write us 👾