CVE-2024-49644 describes an incorrect privilege assignment vulnerability in the Accessibility by AllAccessible software, versions up to 1.3.4. This flaw enables attackers with limited privileges to escalate their privileges without user interaction. The vulnerability is remotely exploitable over the network with low complexity, and it affects confidentiality, integrity, and availability at a high level. No official patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to escalate privileges, potentially gaining unauthorized access to sensitive information, modifying data, or disrupting service availability. The CVSS score of 8.8 reflects a high impact on confidentiality, integrity, and availability. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit exposure by restricting network access to the affected software and monitoring for unusual privilege escalation attempts. Avoid granting unnecessary privileges to users of the Accessibility by AllAccessible product.