ID:13061 - Exploit for Command Injection in Microsoft Windows and Windows Server - CVE-2026-45585

Link to public exploit:

Vulnerability description

The vulnerability allows an attacker to bypass BitLocker security feature.

The vulnerability exists due to insufficient input validation. An attacker with physical access to the system can bypass BitLocker security feature and compromise the affected system.

The vulnerability was dubbed "YellowKey" during public disclosure. 

Remediation