EIP-2026-117373
PRE-CVEKaspersky 17.0.0 - Local CA Root Incorrectly Protected
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117373. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit bypasses Kaspersky's filter driver by using MAXIMUM_ALLOWED access rights to read the private key file (KLSSL_privkey.pem) from %ProgramData%, allowing unprivileged users to extract the root CA private key. The PoC demonstrates the vulnerability by reading and outputting the key in binary format.
Description
Kaspersky 17.0.0 - Local CA Root Incorrectly Protected
Exploits (1)
This exploit bypasses Kaspersky's filter driver by using MAXIMUM_ALLOWED access rights to read the private key file (KLSSL_privkey.pem) from %ProgramData%, allowing unprivileged users to extract the root CA private key. The PoC demonstrates the vulnerability by reading and outputting the key in binary format.