high · CVSS v3 7.8
CVE-2026-16305
CVE-2026-16305 is a local privilege escalation in INFINITT PACS SmartUpdate.exe and SmartExecute.exe. A low‑privileged user can modify the w
Overview
CVE-2026-16305 is a local privilege escalation in INFINITT PACS SmartUpdate.exe and SmartExecute.exe. A low‑privileged user can modify the world‑writable execlist.txt file to inject commands that run with administrator privileges during updates. This flaw allows arbitrary code execution on the host.
Description
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
Impact
The vulnerability compromises confidentiality, integrity, and availability of the PACS system. An attacker who can write to execlist.txt can gain full administrative rights, enabling data exfiltration, tampering with patient records, or disrupting service. Defenders should treat it as a critical internal threat.
Remediation
Apply the vendor‑supplied patch that removes world‑writable permissions from execlist.txt and validates command manifests. If a patch is unavailable, restrict file permissions to administrators only and monitor for modifications. Disable automatic updates or run updates manually with elevated privileges.
Risk context
High severity (CVSS 7.8) indicates significant risk; defenders should prioritize patching or mitigation promptly.
Affected products
- INFINITT PACS
Scores
- Severity
- high
- CVSS v2
- 7.2
- CVSS v3
- 7.8
- CVSS v4
- —
- EPSS
- —