AVAST Antivirus 25.11 has an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with high-level system permissions.
| Vendor | Product | Versions |
|---|---|---|
| avast | avast antivirus | 25.11 |