ID:12380 - Exploit for Insecure DLL loading in Zabbix Agent and Zabbix Agent 2 - CVE-2025-27237

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the application loads OpenSSL configuration file in an insecure manner from a path writable by low-privileged users. A local user can place a malicious file into the corresponding directory and escalate privileges on the system.

Remediation