NoMachine Local Privilege Escalation Vulnerability

CVE-2025-8614

What is CVE-2025-8614?

A local privilege escalation vulnerability exists in NoMachine due to the improper configuration of OpenSSL. The product attempts to load an OpenSSL configuration file from an unsecured location. This flaw permits an authenticated local attacker to escalate their privileges by executing arbitrary code under the context of the service account, provided they can first execute low-privileged code on the system.

References