GHSA-j757-w85c-pwhpHighCVSS 7.8

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This...

Published
October 14, 2026
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

📋 Description

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.

🔗 References (3)