Lakeside Software CVEs and Security Vulnerabilities

CVE-2025-6241

LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present in the SYSTEM PATH environment variable, the user can write a malicious DLL to that directory with arbitrary code. This malicious DLL is executed in the context of NT AUTHORITY\SYSTEM upon service start or restart, due to the Windows default dynamic-link library search order, resulting in local elevation of privileges.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Lakeside Software

Products

Systrack

CVE-2023-6080

Privilege Escalation to SYSTEM in Lakeside Software Installer

Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM level access.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Lakeside Software Lakesidesoftware

Products

Systrack Lsiagent Installer Systrack Lsiagent

Search vulnerabilities

CVE-2025-6241

Privilege Escalation to SYSTEM in Lakeside Software Installer