Privilege Escalation Vulnerability in NSSM by Non-Stop Service Manager
CVE-2025-41686

7.8HIGH

Key Information:

Status
Vendor
CVE Published:
12 August 2025

What is CVE-2025-41686?

A privilege escalation flaw exists in the NSSM application due to improper permission settings on nssm.exe. This vulnerability can be exploited by a low-privileged local attacker to gain elevated administrative rights, potentially compromising system integrity and security. Users are advised to review their configurations and implement necessary updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

DaUM 0.0.0 < 2025.3.1

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-41686 : Privilege Escalation Vulnerability in NSSM by Non-Stop Service Manager