CVE-2022-25031: Rdpsoft Remote Desktop Commander Suite Agent

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate privileges to the system level.

Affected products

• Rdpsoft Remote Desktop Commander Suite Agent: before 4.8 (fixed in 4.8)

Published 2022-03-03. Last modified 2026-06-17.