CVE-2019-3567

CVE-2019-3567 describes an elevation of privilege vulnerability affecting osquery versions prior to v3.4.0, specifically on Windows installations. An attacker can inject a malicious executable path into the extensions.load file and hard link a parent folder to a directory with 'safe' permissions, leading osquery to load the malicious executable with SYSTEM privileges. This vulnerability carries a CVSS score of 8.1 HIGH, indicating a high potential for impact (confidentiality, integrity, availability) with a network attack vector and high attack complexity. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion.