The vulnerability, if exploited, could allow an authenticated miscreant
(Process Optimization Designer User) to embed OLE objects into graphics,
and escalate …

CVE-2025-65117 is a privilege escalation vulnerability in AVEVA's Process Optimization Designer that allows authenticated users to embed OLE objects into graphics. When a victim user interacts with these malicious graphical elements, the attacker can escalate their privileges to the victim's identity. The vulnerability requires authentication as a Process Optimization Designer User but can lead to significant privilege escalation. This affects industrial/OT systems and has been documented by CISA in advisory ICSA-26-015-01.