


Perceptive Security
SOC/SIEM Consultancy

MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary codeā¦
Published:
25 januari 2026 om 23:00:00
Alert date:
26 januari 2026 om 19:02:16
Source:
nvd.nist.gov
Operating Systems, Security Tools
MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code. The vulnerability exists in the path 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe' where attackers can exploit the unquoted path to inject malicious executables. This allows for privilege escalation on affected systems. The vulnerability affects the MTAgentService component specifically and requires local access to exploit.
Technical details
Mitigation steps:
Affected products:
MiniTool ShadowMaker
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2020-36953
https://www.exploit-db.com/exploits/49336
https://www.minitool.com
https://www.vulncheck.com/advisories/minitool-shadowmaker-mtagentservice-unquoted-service-path
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
