CVE-2025-10578: Privilege Escalation in HP Support Assistant

The primary impact of CVE-2025-10578 is the potential for a local attacker to escalate their privileges on a system running HP Support Assistant. This means an attacker who already has some level of access to the system could gain administrative or system-level control. The arbitrary file write capability allows the attacker to modify system files or create new files with elevated permissions, effectively bypassing normal access controls. The blast radius is limited to the system where HP Support Assistant is installed, but successful privilege escalation can lead to complete system compromise, including data theft, malware installation, and further lateral movement within the network if the compromised system has access to other resources.

1. Reserved2025-09-16
2. Published2025-10-01
3. Modified2026-02-26
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-10578 is to upgrade HP Support Assistant to version 9.47.41.0 or later. If an immediate upgrade is not possible due to compatibility issues or testing requirements, consider restricting file write access for the HP Support Assistant process. While not a complete solution, this can limit the attacker's ability to exploit the vulnerability. Monitor system logs for unusual file creation or modification activity related to HP Support Assistant. There are no specific WAF or proxy rules applicable to this vulnerability as it is a local privilege escalation issue.