Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into high-privilege processes. This results in arbitrary code execution with SYSTEM privileges, leading to full compromise of the affected system.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-16 | 2 | Disclosure2 |
| 2026-03-17 | 1 | Disclosure1 |
CVE-2025-69784 A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the prod… https://www.cve.org/CVERecord?id=CVE-2025-69784
Post summary
The text announces a local privilege flaw in the OpenEDR 2.5.1.0 kernel driver, allowing attackers to alter DLL injection paths via a vulnerable IOCTL interface.
CVE-2025-69784 Local Privilege Escalation in OpenEDR 2.5.1.0 via Kernel Driver IOCTL Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69784
Post summary
A new local privilege escalation vulnerability (CVE‑2025‑69784) has been disclosed for OpenEDR 2.5.1.0, involving manipulation of kernel‑driver IOCTL calls.
🟠 CVE-2025-69784 - High A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this ... https://www.thehackerwire.com/vulnerability/CVE-2025-69784/ https://t.co/Ci01C2CAiV
Post summary
The text announces CVE‑2025‑69784 as a high‑severity local privilege escalation vulnerability in OpenEDR, detailing its exploitation via a vulnerable IOCTL interface.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xcitium | openedr | 2.5.1.0 | - | - |