CVE-2013-10046 Agnitum Outpost Internet Security Local Privilege Escalation
An unprivileged user can execute arbitrary code with SYSTEM privileges by exploiting a directory traversal flaw in the acs.exe named pipe protocol.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-10046?
CVE-2013-10046 is a high-severity vulnerability in Agnitum Ltd. Outpost Internet Security, published on 1 Aug 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting a directory traversal weakness in the pipe protocol, an attacker can instruct the service to load a malicious DLL from a user-controlled location. The DLL is then executed in the context of the privileged service.
Which versions are affected by CVE-2013-10046?
How do I fix CVE-2013-10046?
No fix has been published for CVE-2013-10046 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-10046 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-10046 exists.
Public exploit code: 1 Metasploit module.
Sources
Also known as GHSA-97gj-fw67-mjpj.