{"id":"CVE-2024-51448","aliases":["EUVD-2024-45798","GHSA-6pxp-6h5g-5389"],"status":"published","title":"IBM Robotic Process Automation privilege escalation","description":"IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00149,"percentile":0.04116,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-277","CWE-732"],"published":"2025-01-18T15:08:42Z","modified":"2026-06-17T08:05:43Z","products":[{"vendor":"ibm","product":"robotic process automation"},{"vendor":"ibm","product":"robotic_process_automation"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7177586","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51448"},{"url":"https://github.com/advisories/GHSA-6pxp-6h5g-5389"}],"sources":{"cve":[{"id":"CVE-2024-51448","title":"IBM Robotic Process Automation privilege escalation","description":"IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.","status":"published","published":"2025-01-18T15:08:42.484Z","modified":"2025-01-21T20:58:29.659Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-277"],"updated_at":"2026-11-02T14:34:01.630882Z"}],"euvd":[{"id":"EUVD-2024-45798","description":"IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.","status":"published","published":"2025-01-18T15:08:42Z","modified":"2025-01-21T20:58:29Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:15.779798Z"}],"ghsa":[{"id":"GHSA-6pxp-6h5g-5389","title":"IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a...","description":"IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.","status":"published","published":"2025-01-18T15:31:30Z","modified":"2025-03-25T15:32:21Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-277","CWE-732"],"updated_at":"2026-11-02T15:00:26.443231Z"}],"nvd":[{"id":"CVE-2024-51448","description":"IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.","status":"published","published":"2025-01-18T15:15:08.183Z","modified":"2026-06-17T08:05:43.853Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-277","CWE-732"],"updated_at":"2026-11-02T14:10:42.895329Z"}]}}