Privilege Escalation Vulnerability in Everything by Voidtools

CVE-2025-12683

What is CVE-2025-12683?

A vulnerability in Everything, a search tool by Voidtools, stems from the service running with SYSTEM privileges and communicating with its GUI via a named pipe that has a NULL Discretionary Access Control List (DACL). This misconfiguration grants all users unrestricted access to the named pipe, potentially allowing a low-privileged user to exploit this weakness for service denial or privilege escalation when combined with other vulnerabilities.

References