NetKids iMark Uncontrolled Search Path Element Vulnerability

Executive Summary

CVE-2026-66344 is an Uncontrolled Search Path Element vulnerability in NetKids iMark by Integrated Systems Technologies, Inc. It allows an authenticated attacker to execute arbitrary code with SYSTEM privileges by exploiting unquoted file paths in the 'nkmsgService' service. This occurs because the executable path lacks quotes, enabling malicious files with spaces in their names to be executed unintentionally.

The vulnerability stems from the application searching for libraries or executables in directories where an attacker could place a malicious file with the same name. This could lead to unintended program execution with elevated privileges.

Useful 0 Not Useful 0

Detection Guidance

Check if the NetKids iMark service 'nkmsgService' is running and inspect its ImagePath registry value for unquoted paths. Use commands like 'sc query nkmsgService' to verify service status and 'reg query HKLM\SYSTEM\CurrentControlSet\Services\nkmsgService /v ImagePath' to check the path format.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system with SYSTEM privileges, potentially taking full control of your computer. This could lead to data theft, installation of additional malware, or disruption of services. Attackers need write access to system folders to place malicious files.

Additionally, if you have NetKids iMark installed, an attacker could manipulate DLL loading or modify files in the installation directory if proper access controls are not in place, further compromising system integrity.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or control of systems, violating data protection and privacy requirements under GDPR and HIPAA. Unauthorized code execution may result in data breaches, unauthorized data access, or loss of data integrity, all of which are critical compliance violations.

Organizations using NetKids iMark must address this vulnerability promptly to maintain compliance with these regulations, as failure to do so could result in legal penalties, reputational damage, and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the workaround by adding quotes to the ImagePath registry value for 'nkmsgService' or modify the binPath using 'sc config nkmsgService binPath= "C:\path\to\service.exe"'. Restart the service afterward. Alternatively, review and adjust installation folder permissions by removing 'Authenticated Users' group access.

Useful 0 Not Useful 0