Local Privilege Escalation Vulnerability in Action1 from Action1 Software

CVE-2025-5480

What is CVE-2025-5480?

The vulnerability in Action1 arises from an inaccurate search path configuration for OpenSSL, allowing local attackers to escalate their privileges. By exploiting this flaw, an attacker with low-privileged access can manipulate the unsecured loading of an OpenSSL configuration file. This could lead to arbitrary code execution with SYSTEM privileges, enabling unauthorized control over the affected system. Proper security practices and updates can mitigate this vulnerability.

References