CyberRota Analysis
AI-GeneratedDuplicati v2.3.0.1 backup software allows authenticated users to gain MODIFY permissions that extend to all subdirectories, particularly when installed outside of the Program Files directory. This misconfiguration enables a standard local user to overwrite DLL files in the service directory, leading to arbitrary code execution with SYSTEM privileges upon service restart. Organizations using this software, especially those with local user access, should prioritize remediation to mitigate the risk of unauthorized code execution.
Original NVD Description
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write to. A standard local user can overwrite any DLL in the service directory. On service restart, the OS loads the attacker's DLL before any managed code runs, executing arbitrary code as SYSTEM.