Akamai Guardicore Platform Agent up to 50.14.x/51.11.x/52.1.0 inclusion of functionality from untrusted control sphere

Summaryinfo

A vulnerability was found in Akamai Guardicore Platform Agent up to 50.14.x/51.11.x/52.1.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation results in inclusion of functionality from untrusted control sphere. This vulnerability is known as CVE-2025-53841. Attacking locally is a requirement. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Akamai Guardicore Platform Agent up to 50.14.x/51.11.x/52.1.0. Affected is an unknown code. The manipulation with an unknown input leads to a inclusion of functionality from untrusted control sphere vulnerability. CWE is classifying the issue as CWE-829. The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows users have default write access to. This allows an unprivileged local user to create a crafted "openssl.cnf" file in that location and, by specifying the path to a custom DLL file in a custom OpenSSL engine definition, execute arbitrary commands with the privileges of the Guardicore Agent process. Since Guardicore Agent runs with SYSTEM privileges, this permits an unprivileged user to fully elevate privileges to SYSTEM level in this manner.

The advisory is available at tuv.com. This vulnerability is traded as CVE-2025-53841 since 07/09/2025. The exploitability is told to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available.

Upgrading to version 50.15.0, 51.12.0 or 52.1.1 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Akamai

Name

• Guardicore Platform Agent

Version

• 50.0
• 50.1
• 50.2
• 50.3
• 50.4
• 50.5
• 50.6
• 50.7
• 50.8
• 50.9
• 50.10
• 50.11
• 50.12
• 50.13
• 50.14
• 51.0
• 51.1
• 51.2
• 51.3
• 51.4
• 51.5
• 51.6
• 51.7
• 51.8
• 51.9
• 51.10
• 51.11
• 52.0
• 52.1.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion