Local Privilege Escalation Vulnerability in AOMEI Backupper Workstation

CVE-2025-8612

What is CVE-2025-8612?

A local privilege escalation vulnerability exists in AOMEI Backupper Workstation, allowing attackers who have executed low-privileged code on targeted installations to escalate their privileges. This issue arises from an improper handling of the restore functionality, which can be exploited through the creation of junctions. By doing so, an attacker can manipulate the service to create arbitrary files, enabling them to execute code with SYSTEM privileges. An administrator’s interaction is required in the exploitation process, highlighting the need for vigilant user practices.

References