VULNERABILITY INTELLIGENCE
CVE-2025-0664
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-07-21
Last modified2026-06-17
Description
A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges.
Weakness classification
- trellixpsirt@trellix.com: CWE-94