CVE-2025-10549 — DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation

Description (CNA)

EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.

Affected (CNA)

Vendor / product	Versions
EfficientLab, LLC / Controlio	affected <1.3.95

CWE

CWE-427

References

https://r.sec-consult.com/controlio
https://kb.controlio.net/hc/en-us/articles/45777908471185-Client-Update-April-15-2026-ver-1-3-95

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2026/Apr/19