Privilege Escalation via Filename Control in AODManager

Executive Summary

This vulnerability involves the external control of a file name in the AODManager component prior to the SMR Apr-2026 Release 1. It allows a privileged local attacker to create a file with system-level privileges by manipulating the file name.

Useful 0 Not Useful 0

Impact Analysis

An attacker with local privileged access could exploit this vulnerability to create files with system privileges. This could lead to unauthorized modification or creation of system files, potentially compromising system integrity or enabling further attacks.

Useful 0 Not Useful 0