CVE-2024-1344: Laborofficefree

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This user can log in remotely and has root-like privileges.

Affected products

• Laborofficefree Laborofficefree: version 19.10 only

Published 2024-02-19. Last modified 2026-06-17.