CVE-2026-77827

Awaiting Analysis Awaiting Analysis - Queue

Local Privilege Escalation in Maono Link Windows Service

Publication date: 2026-09-08

Last updated on: 2026-09-14

Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government

Description

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-14

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-77827

Affected Vendors & Products

Vendor	Product	Version / Range
maono	link	to 4.0.80 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-428	The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

Attack-Flow Graph

Executive Summary

CVE-2026-77827 is a local privilege escalation vulnerability in Maono Link 3.8.13 for Windows. It allows a standard user account to gain higher privileges by exploiting improper write permissions in the 'C:\ProgramData\Maono' directory via the MaonoAiServices Windows service.

Detection Guidance

Check the Maono Link software version installed on your system. If it is version 3.8.13 through 3.9.99, the vulnerability may be present. Verify the permissions of the 'C:\ProgramData\Maono' directory to ensure standard users do not have write privileges.

Impact Analysis

An attacker with local access could escalate privileges from a standard user to higher levels, potentially gaining control over the system. This could lead to unauthorized data access, system modifications, or installation of malicious software.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected versions may face compliance breaches, legal penalties, and reputational damage due to potential data exposure.

Mitigation Strategies

Update Maono Link to version 4.0.80 or later immediately. Remove improper write privileges from the 'C:\ProgramData\Maono' directory for standard user accounts. Ensure no unauthorized modifications can occur in this directory.

Hi! I’m here to help you understand CVE-2026-77827. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70