CVE-2021-31854

CVE-2021-31854 is a command injection vulnerability in McAfee Agent (MA) for Windows versions prior to 5.7.5. An unauthenticated local attacker can exploit this by placing a malicious cleanup.exe file, which is then executed during the agent deployment process. This vulnerability carries a high CVSS score of 7.8, indicating a low attack complexity and the potential for complete compromise of confidentiality, integrity, and availability, including privilege escalation to root. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among security researchers.