CVE-2025-36633

CVE-2025-36633 is a high-severity local privilege escalation vulnerability affecting Tenable Agent versions prior to 10.8.5 on Windows hosts. A non-administrative user can exploit this flaw to arbitrarily delete local system files with SYSTEM privileges. The vulnerability has a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability, with low attack complexity and requiring only local access. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among security researchers.