CVE-2024-6141

CVE-2024-6141 is a directory traversal vulnerability in the Windscribe Service that allows local privilege escalation to SYSTEM. An attacker must first have low-privileged code execution on the target system to exploit this flaw, which stems from insufficient validation of user-supplied paths in file operations. Rated 7.8 HIGH on CVSS, it poses a significant risk for complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.