top of page
perceptive_background_267k.jpg

MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code…

Published:

25 January 2026 at 23:00:00

Alert date:

26 January 2026 at 19:02:16

Source:

nvd.nist.gov

Click to open the original link from this advisory

Operating Systems, Security Tools

MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code. The vulnerability exists in the path 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe' where attackers can exploit the unquoted path to inject malicious executables. This allows for privilege escalation on affected systems. The vulnerability affects the MTAgentService component specifically and requires local access to exploit.

Technical details

Mitigation steps:

Affected products:

MiniTool ShadowMaker

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page