AOMEI Backupper Workstation has a local privilege escalation vulnerability that allows attackers to escalate privileges on affected installations. To exploit this vulnerability, an attacker must first execute low-privileged code on the target system and require user interaction from an administrator. The flaw exists within the restore functionality, where an attacker can create a junction to abuse the service and execute arbitrary code in the context of SYSTEM.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2025-8612 |
Exploitation
To exploit this vulnerability, an attacker must first gain the ability to execute low-privileged code on the target system. Once this is achieved, the attacker can create a junction within the restore functionality of AOMEI Backupper Workstation, allowing them to abuse the service and create arbitrary files, ultimately escalating their privileges to execute code as SYSTEM.
Affected Products
- AOMEI Backupper Workstation: A backup and recovery software that allows users to create backups of their data and restore it when needed. The vulnerability affects its restore functionality, enabling privilege escalation.
Mitigation
To mitigate this vulnerability, users should ensure that they apply the latest updates and patches provided by AOMEI for Backupper Workstation. Additionally, restricting user permissions and monitoring for unauthorized access can help reduce the risk of exploitation.