EIP-2026-116790

PRE-CVE

AnyDesk 2.5.0 - Unquoted Service Path Privilege Escalation

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-116790. PoCs published by Tulpa.

AI-analyzed exploit summary This is a technical writeup describing an unquoted service path vulnerability in AnyDesk 2.5.0, which could allow local privilege escalation (LPE) due to improper handling of the service path. The analysis includes service configuration details and exploitation prerequisites.

Description

AnyDesk 2.5.0 - Unquoted Service Path Privilege Escalation

Exploits (1)

exploitdb WRITEUP
by Tulpa · textlocalwindows
https://www.exploit-db.com/exploits/40410

This is a technical writeup describing an unquoted service path vulnerability in AnyDesk 2.5.0, which could allow local privilege escalation (LPE) due to improper handling of the service path. The analysis includes service configuration details and exploitation prerequisites.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: AnyDesk 2.5.0
Auth required
Prerequisites: Local user access · Ability to place executable in system root path
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026