CVE-2025-0664 — Trellix / Trellix Endpoint Security (HX) Agent

CVE-2025-0664

Trellix / Trellix Endpoint Security (HX) Agent PUBLISHED

Description (CNA)

A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges.

Affected (CNA)

Vendor / product	Versions
Trellix / Trellix Endpoint Security (HX) Agent	affected 36.30.0 and 35.31.28

CWE

CWE-94

References

https://thrive.trellix.com/s/article/000014450

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.