Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-2782 EUVD-2025-8667GHSA-r5wr-v3gv-93m3

WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory

Published Mar 28, 2025 · Updated Aug 8, 2026 · Assigned by WatchGuard

Description

The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.

Affected products

VendorProductAffectedFixed
WatchGuard SSO Terminal Services Agent 12.0 – < 12.11.2 12.11.2

References