The vulnerability, if exploited, could allow an authenticated miscreant
(Process Optimization Designer User) to embed OLE objects into graphics,
and escalate …

CVE-2025-65117 is a privilege escalation vulnerability affecting AVEVA's Process Optimization Designer. An authenticated user with Process Optimization Designer User privileges can exploit this vulnerability by embedding malicious OLE objects into graphics. When a victim user interacts with these compromised graphical elements, the attacker can escalate their privileges to the identity of the victim user. This vulnerability requires initial authentication but allows for horizontal privilege escalation through social engineering via embedded graphics objects.