GHSA-6wg9-8g76-mrm8unknown

Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co....

Published
November 2, 2026
Last Modified
November 2, 2026

🔗 CVE IDs covered (1)

📋 Description

Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable execlist.txt command manifest that is processed during application updates.

🔗 References (3)