CVE-2025-27237

This repository contains a working proof-of-concept for CVE-2025-27237, a local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows. The exploit leverages OpenSSL configuration file hijacking to load a malicious DLL with SYSTEM privileges.

This repository contains a functional proof-of-concept exploit for CVE-2025-27237, demonstrating local privilege escalation in Zabbix Agent 2 for Windows via OpenSSL configuration file hijacking. The exploit includes detailed steps, malicious DLL code, and verification methods.