An incorrect file handling permission vulnerability exists in the N-central Windows Agent and Probe. Under specific conditions, this flaw can allow a local low-privileged user to execute commands with elevated permissions.

The N-central Windows Agent creates a file using Windows default privileges, which permit any user to modify it. This file is subsequently executed by a Windows operating system component without code signing or integrity checks, making it susceptible to race condition-based file manipulation and privilege escalation.

Affected Software:
N-central versions 2025.2.1 and earlier

Resolution:
Upgrade to N-central version 2025.3 or later.