Windows Nessus Agent Flaw Could Grant SYSTEM Privileges, Patch Released
A newly disclosed vulnerability in Tenable Nessus Agent for Windows allows a local attacker to abuse NTFS junctions (a type of filesystem symlink) to redirect file operations, potentially delete critical system files, and achieve arbitrary code execution with SYSTEM privileges. A patch has been released (Nessus Agent version 11.1.3); organizations using Nessus Agents on Windows should upgrade immediately to reduce exposure and protect high-value endpoints.