The vulnerability, if exploited, could allow an authenticated miscreant
(OS Standard User) to trick Process Optimization services into loading
arbitrary code …

CVE-2025-65118 is a privilege escalation vulnerability in AVEVA Process Optimization services. An authenticated OS Standard User can exploit this vulnerability to trick the Process Optimization services into loading arbitrary code. Successful exploitation allows privilege escalation to OS System level, potentially resulting in complete compromise of the Model Application Server. The vulnerability affects AVEVA industrial control systems and poses significant risk to operational technology environments.