CVE-2023-37244

CVE-2023-37244 is a Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in the AutomationManager.AgentService.exe application within N-able Automation Manager on Microsoft Windows. This allows a standard user to create a pseudo-symlink, potentially leading to arbitrary file deletions. With a CVSS score of 7.0 (HIGH), exploitation requires low privileges and high attack complexity, but can result in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.