Local Privilege Escalation in GFI MailEssentials by GFI Software
CVE-2025-34489
7.8HIGH
What is CVE-2025-34489?
A local privilege escalation vulnerability in GFI MailEssentials prior to version 21.8 allows a local attacker to gain elevated privileges. By sending a crafted serialized payload to a .NET Remoting Service, the attacker can escalate their privileges to that of the NT Authority/SYSTEM. This vulnerability can potentially lead to unauthorized access and control over the affected system, posing significant risks to the integrity and security of the environment.
Affected Version(s)
MailEssentials 0 < 21.8
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.