CVE-2025-65117 is a privilege escalation vulnerability affecting AVEVA's Process Optimization Designer. An authenticated user with Process Optimization Designer User privileges can exploit this vulnerability by embedding malicious OLE objects into graphics. When a victim user interacts with these compromised graphical elements, the attacker can escalate their privileges to the identity of the victim user. This vulnerability requires initial authentication but allows for horizontal privilege escalation through social engineering via embedded graphics objects.