Local Privilege Escalation Vulnerability in Wondershare MirrorGo
CVE-2022-50690

8.5HIGH

Key Information:

Vendor

Wondershare

Status
Wondershare Mirrorgo
Vendor
CVE Published:
22 December 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2022-50690?

Wondershare MirrorGo 2.0.11.346 has a local privilege escalation vulnerability caused by improper file permissions on executable files. This flaw enables unprivileged local users to replace the ElevationService.exe with a malicious file, which could allow them to execute arbitrary code with LocalSystem privileges. Taking immediate action to update the software and ensure proper permissions is crucial to mitigate potential exploitation.

Affected Version(s)

Wondershare MirrorGo 2.0.11.346

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2022-50690 - Proof of Concept

References

https://www.exploit-db.com/exploits/50787
exploit
https://www.wondershare.com/
product
https://www.vulncheck.com/advisories/wondershare-mirrorgo...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luis Martinez
JSON
.