Insecure Permissions in MSI NBFoundation Service Allows Information Disclosure

Compliance Impact

The provided information does not explicitly address how the CVE-2026-37452 vulnerability impacts compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves the MSI NBFoundation Service (MSIAPService.exe) allowing unauthorized registry operations via the named pipe \\.\pipe\MSI_SERVICE_2 accessible to all Authenticated Users.

To detect exploitation attempts or presence of this vulnerability, you can check for unauthorized access or modifications to registry keys such as CurrentVersion\Run or CurrentControlSet\Services\* which may indicate persistence or service hijacking.

While no specific detection commands are provided, monitoring access to the named pipe \\.\pipe\MSI_SERVICE_2 and auditing registry changes under HKLM or HKCU related to MSI NBFoundation Service could help identify exploitation.

Useful 0 Not Useful 0

Mitigation Strategies

The primary mitigation is to upgrade MSI Center / MSI NBFoundation Service to the fixed version 2.0.70.0 or later through MSI's official update channel.

There is no configuration-only workaround available for affected versions, so applying the official patch is critical to prevent exploitation.

Useful 0 Not Useful 0

Executive Summary

This vulnerability is an Insecure Permissions issue in the MSI NBFoundation Service version 2.0.2506.1201. It allows a remote attacker to obtain sensitive information through the MSIAPService.exe component.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow a remote attacker to access sensitive information, which could lead to unauthorized disclosure of data and potential compromise of system confidentiality.

Useful 0 Not Useful 0