CVE-2011-1056: Metasploit Framework

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.

Affected products

• Metasploit Metasploit Framework: version 3.5.1 only

Published 2011-02-21. Last modified 2026-06-16.