CVE-2024-47856

CVE-2024-47856 is a critical path interception vulnerability affecting RSA Authentication Agent for Windows versions prior to 7.4.7. An attacker can exploit unquoted service or shortcut paths containing spaces to execute arbitrary code by placing a malicious executable in a higher-level directory. With a CVSS score of 9.8 (CRITICAL), this vulnerability is network-exploitable with low attack complexity, allowing for full compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential future interest.