CVE-2025-34352

CVE-2025-34352 is a high-severity vulnerability affecting JumpCloud Remote Assist for Windows versions prior to 0.317.0, specifically during agent uninstall or update operations. A low-privileged local attacker can exploit predictable file operations within a user-writable temporary directory to achieve arbitrary file writes, leading to denial of service, or arbitrary file/folder deletion, culminating in local privilege escalation to SYSTEM. With a CVSS score of 8.5, this vulnerability presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered considerable community discussion and media coverage, indicating heightened awareness and potential for future exploitation.