ESET Management Agent CVE-2025-13818

ESET Management Agent is the Windows endpoint component of the ESET PROTECT (formerly ESMC/ERA) centralized management platform, identified by CPE cpe:2.3:a:eset:management_agent. The root cause is CWE-367 (Time-of-check Time-of-use Race Condition): the agent creates a temporary batch file on disk as part of its privileged operations, but fails to adequately protect that file between its creation and subsequent execution. Because the agent runs with elevated privileges (typically SYSTEM), an attacker who can write to the temporary file path can substitute malicious content during the exploitable window, causing the agent to execute attacker-supplied commands with SYSTEM-level authority. The Windows temporary file handling model, where predictable or race-able temp paths can be hijacked, is the enabling environment.