# CVE-2025-53841

> CVE-2025-53841. CVSS 7.8 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2025-53841
Last updated: 2026-10-18T17:10:00Z

- Published: 2025-12-03 00:00 UTC · Updated: 2026-10-18 17:10 UTC · Assigner: mitre
- CVSS: 7.8 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS: 0.15%, 4th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-829

## Description

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows users have default write access to. This allows an unprivileged local user to create a crafted "openssl.cnf" file in that location and, by specifying the path to a custom DLL file in a custom OpenSSL engine definition, execute arbitrary commands with the privileges of the Guardicore Agent process. Since Guardicore Agent runs with SYSTEM privileges, this permits an unprivileged user to fully elevate privileges to SYSTEM level in this manner.

## Affected vendors and products

- Akamai: Guardicore Platform Agent

## Tracked companies

- [Akamai](https://rewindex.com/company/akamai.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2025-53841)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2025-53841)
- [https://community.akamai.com/customers/s/article/Windows-Agent-Vulnerability-Summary-and-Resolution](https://community.akamai.com/customers/s/article/Windows-Agent-Vulnerability-Summary-and-Resolution)
- [https://techdocs.akamai.com/guardicore-platform-agent/changelog](https://techdocs.akamai.com/guardicore-platform-agent/changelog)
- [https://www.akamai.com/blog/security/advisory-cve-2025-53841-guardicore-local-privilege-escalation](https://www.akamai.com/blog/security/advisory-cve-2025-53841-guardicore-local-privilege-escalation)
- [https://www.tuv.com/landingpage/en/vulnerability-disclosure/](https://www.tuv.com/landingpage/en/vulnerability-disclosure/)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2025-53841 · Markdown: https://rewindex.com/cve/CVE-2025-53841.md · JSON: https://rewindex.com/api/v1/cves/CVE-2025-53841 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:14:39.873Z