Privilege Escalation in Konga via Malicious OpenSSL Files

Executive Summary

CVE-2026-45221 is a privilege escalation vulnerability in Konga versions before 2.1.0. It allows low-privileged local attackers to execute arbitrary code by placing malicious OpenSSL configuration or library files in a hardcoded filesystem path. On Windows, this directory is writable by any authenticated local user, enabling attackers to create it and insert malicious files that execute at the privilege level of the Konga user or service account.

Useful 0 Not Useful 0

Detection Guidance

Check for the presence of the hardcoded OpenSSL directory path on Windows systems where Konga is installed. Look for directories writable by any authenticated local user that may contain OpenSSL configuration or library files. Inspect Konga service accounts and user permissions to identify potential privilege escalation paths.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with local access to escalate privileges and execute arbitrary code on systems running vulnerable Konga versions. It could lead to unauthorized system access, data theft, or further network compromise depending on the privileges of the Konga service account.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to sensitive data or systems. GDPR and HIPAA require protection against unauthorized access and privilege escalation, which this flaw facilitates. Organizations using vulnerable Konga versions may face compliance violations and potential penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Konga to version 2.1.0 or later to address the vulnerability. Remove write permissions for non-privileged users from directories where Konga or OpenSSL files reside. Monitor for unauthorized file creation in system directories and review service account permissions to limit privilege escalation risks.

Useful 0 Not Useful 0