CVE-2026-57223

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.17 Suricata versions prior to 8.0.6

Description The Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to the CreateServiceA() function. If the software is installed in a path containing spaces and a local low-privileged attacker has write access to an earlier path component, Windows may execute an attacker-controlled program as LocalSystem, leading to local privilege escalation.

Recommendations Update to version 7.0.17 or later. Update to version 8.0.6 or later.