CVE-2023-38354: Minitool Shadowmaker

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

MiniTool Shadow Maker version 4.1 contains an insecure installation process that allows attackers to achieve remote code execution through a man in the middle attack.

Affected products

• Minitool Shadowmaker: version 4.1 only

Published 2023-09-19. Last modified 2026-06-17.