CVE-2025-66264: ClientMate 6.2.2

Affected technology

ClientMate · 6.2.2
MegaTec Taiwan

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with write privileges to the filesystem can insert a malicious executable in the path, leading to privilege escalation. Source advisory’s CVSS 4.0 assessment (base score 7.2/10) rates confidentiality impact as high; integrity and availability impact as low.