ESET PROTECT and Inspect

CVE-2025-13176: Local privilege escalation in ESET Inspect Connector for Windows

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL.

Published

ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 4.0 8.4
EPSS0.16%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory

Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.

Affected and fixed versions

Product / branchFixed in
ESET Inspect Connector (Windows) 0 to 2.8.5555Upgrade past 2.8.5555; see the advisory

Always confirm against the vendor advisory, which lists every fixed hotfix.

What it is

Planting a custom configuration file

in

ESET Inspect Connector allow load a malicious DLL.

Sources

KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.