CVE-2025-8614
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-02

Last updated on: 2025-09-10

Assigner: Zero Day Initiative

Description
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-26766.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-02
Last Modified
2025-09-10
Generated
2026-06-16
AI Q&A
2025-09-02
EPSS Evaluated
2026-06-14
NVD
CVE-2025-8614
EUVD
EUVD-2025-26446
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
nomachine nomachine to 8.17.2 (exc)
nomachine nomachine From 9.0 (inc) to 9.1.24 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-8614 is a local privilege escalation vulnerability in NoMachine products caused by the software loading an OpenSSL configuration file from an unsecured location. This allows a local attacker who already has low-privileged code execution on the system to escalate their privileges by executing arbitrary code with the service account's privileges. [1]

Impact Analysis

This vulnerability can allow an attacker with limited access to escalate their privileges on the affected system, potentially gaining control over the service account running NoMachine. This could lead to unauthorized code execution, data compromise, or further system compromise. [1]

Detection Guidance

This vulnerability can be detected by verifying if the NoMachine installation loads the OpenSSL configuration file from an unsecured or unexpected location. Checking the file paths and permissions of the OpenSSL configuration files used by NoMachine can help identify the issue. Specific commands to inspect the OpenSSL configuration file location and permissions include: 1) Using 'ps aux | grep nxserver' to identify the NoMachine service process and its environment. 2) Checking the OpenSSL configuration file path used by NoMachine, for example by examining environment variables or configuration files related to NoMachine. 3) Using 'ls -l' on the OpenSSL configuration file path to verify if it is in an unsecured location or writable by low-privileged users. However, no explicit detection commands are provided in the resources. [1]

Mitigation Strategies

Immediate mitigation steps include applying the update released by NoMachine that addresses and fixes this vulnerability. Additionally, restricting access and permissions to the OpenSSL configuration files used by NoMachine to prevent unauthorized modification can help mitigate the risk. Ensuring that only trusted users have the ability to execute code on the system will also reduce the likelihood of exploitation. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-8614. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart