JumpCloud Remote Assist for Windows Agent Flaw Let Attackers Escalate Privilege

The JumpCloud Remote Assist vulnerability (CVE-2025-34352) exposes Windows systems to local privilege escalation and denial-of-service attacks. Discovered by XM Cyber researcher Hillel Pinto, the flaw stems from insecure file operations in the agent’s uninstaller.​ The JumpCloud Remote Assist for Windows agent, versions prior to 0.317.0, runs as NT AUTHORITY\SYSTEM and performs file create, write, delete, […]

The post JumpCloud Remote Assist for Windows Agent Flaw Let Attackers Escalate Privilege appeared first on Cyber Security News.