CVE-2021-1492

CVE-2021-1492 describes a vulnerability in the Duo Authentication Proxy installer prior to version 5.2.1, affecting Duo and Microsoft Windows authentication proxy products. The flaw allows a local attacker with user privileges to manipulate installation paths, potentially leading to arbitrary file writes in privileged directories. This high-severity vulnerability (CVSS 7.1) could result in denial of service or privilege escalation, but is only exploitable during new installations. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.