ESET Management Agent CVE-2025-13818

Exploitation requires the attacker to already hold high-privilege local access (PR:H per CVSS 4.0) on the Windows endpoint where ESET Management Agent is installed and running. The attacker must have write access to the directory in which the agent creates its temporary batch files, and must successfully win the TOCTOU race window between file creation and file execution. The vulnerability is Windows-specific - the advisory title explicitly scopes it to 'ESET Management Agent for Windows.' Exploitation is limited to local attack vectors (AV:L); no remote exploitation path exists. Factors that limit practical exploitation include the high privilege pre-condition, the need to time a file replacement within the agent's race window, and the requirement that the agent perform the relevant operation during the attacker's window of opportunity.

The vendor-supplied CVSS 4.0 score of 8.3 reflects high confidentiality and integrity impact but is constrained by the PR:H prerequisite - exploitation requires the attacker to already hold high-level local access, which substantially limits the realistic attack surface. The EPSS score of 0.02% (4th percentile) and absence from CISA KEV further indicate this is not currently being exploited at scale. The TOCTOU window, while inherently timing-dependent, is classified AC:L by the vendor, implying the race is reliably achievable by a local high-privilege attacker without external conditions. In practice, even a mid-sized municipal IT team in inowroclaw running ESET PROTECT across managed endpoints should treat this as a moderate-urgency patch rather than a drop-everything emergency, given that the attacker must already have high-privilege local access - a strong pre-condition that limits the realistic exposed population to scenarios of insider threat or post-initial-compromise lateral movement.

An attacker who has already obtained high-privilege local access to a Windows endpoint managed by ESET Management Agent monitors the system's temporary directory for batch file creation events triggered by agent operations. During the window between file creation and execution, the attacker rapidly replaces the batch file contents with malicious commands. When the agent - running as SYSTEM - subsequently executes the file, the attacker's payload runs with full system authority, completing the privilege escalation. No public proof-of-concept code is known at this time.