CVE-2025-53841

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows users have default write access to. This allows an unprivileged local user to create a crafted "openssl.cnf" file in that location and, by specifying the path to a custom DLL file in a custom OpenSSL engine definition, execute arbitrary commands with the privileges of the Guardicore Agent process. Since Guardicore Agent runs with SYSTEM privileges, this permits an unprivileged user to fully elevate privileges to SYSTEM level in this manner.

• CWE-829

• https://community.akamai.com/customers/s/article/Windows-Agent-Vulnerability-Summary-and-Resolution
• https://techdocs.akamai.com/guardicore-platform-agent/changelog
• https://www.akamai.com/blog/security/advisory-cve-2025-53841-guardicore-local-privilege-escalation
• https://www.tuv.com/landingpage/en/vulnerability-disclosure/

Published

Dec 3, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53835XWiki Rendering is a generic rendering system that converts …9
• CVE-2025-53836XWiki Rendering is a generic rendering system that converts …8.8
• CVE-2025-53838LinkAce is a self-hosted archive to collect website links. A…5.4
• CVE-2025-53839DRACOON is a file sharing service, and the DRACOON Branding …4
• CVE-2025-5384A vulnerability was found in JeeWMS up to 20250504. It has b…9.8
• CVE-2025-53840Icinga DB Web provides a graphical interface for Icinga moni…2.4
• CVE-2025-53842Use of hard-coded credentials issue exists in ZWX-2000CSW2-H…6.8
• CVE-2025-53843A stack-based buffer overflow vulnerability in Fortinet Fort…7.5
• CVE-2025-53844A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.…8.8
• CVE-2025-53845An improper authentication vulnerability [CWE-287] in Fortin…6.5
• CVE-2025-53847A missing authentication for critical function vulnerability…8.8
• CVE-2025-53848Rejected reason: Not used