CVE-2021-47739

HIGH

Epic Games Easy Anti-Cheat 4.0 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-47739. PoCs published by LiquidWorm.

AI-analyzed exploit summary This is a writeup describing an unquoted search path vulnerability in Epic Games Easy Anti-Cheat 4.0, which could allow local privilege escalation. The issue is in the service 'EasyAntiCheat' where an attacker could exploit the unquoted path to execute arbitrary code with elevated privileges.

Description

Epic Games Easy Anti-Cheat 4.0 contains an unquoted service path vulnerability that allows local non-privileged users to execute arbitrary code with elevated system privileges. Attackers can exploit the service configuration by inserting malicious code in the system root path that would execute with LocalSystem privileges during application startup.

Exploits (1)

exploitdb WRITEUP
by LiquidWorm · textlocalwindows
https://www.exploit-db.com/exploits/49841

This is a writeup describing an unquoted search path vulnerability in Epic Games Easy Anti-Cheat 4.0, which could allow local privilege escalation. The issue is in the service 'EasyAntiCheat' where an attacker could exploit the unquoted path to execute arbitrary code with elevated privileges.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: Epic Games Easy Anti-Cheat 4.0.0.0
Auth required
Prerequisites: Local access to the system · Ability to insert executable code in the system root path
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/49841
Various Sources product
https://www.epicgames.com
Various Sources product
https://www.easy.ac
Third Party Advisory third-party-advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5652.php

Scores

CVSS v3 8.4
EPSS 0.0017
EPSS Percentile 6.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (1)
Epic Games/Easy Anti-Cheat 4.0
Published Dec 23, 2025
Tracked Since Feb 18, 2026