high7.8
CVE-2026-110359
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.
Impact
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.
Affected products
| Product | Affected versions |
|---|---|
| Hyland Desktop Host For Windows | before 25.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.