CVE-2021-41065

CVE-2021-41065 is a local privilege escalation vulnerability affecting Listary through version 6, allowing an attacker to impersonate a privileged user. By creating a named pipe, an attacker can trick Listary into accessing it and duplicating the victim's token, gaining their privileges. This vulnerability has a CVSS score of 7.3 (HIGH), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on CISA's KEV catalog, nor is there any community discussion or media coverage.