This vulnerability in Forcepoint VPN Client for Windows (versions 6.11.3 and prior) involves execution with unnecessary privileges (CWE-250), enabling a local non-administrative user to escalate privileges to SYSTEM level. The CVSS 4.0 score of 8.5 indicates a high-severity local attack vector with low attack complexity and no user interaction required. The vendor has not yet published an official fix or remediation guidance. The vulnerability is limited to local privilege escalation and does not involve remote exploitation or cloud services.

A local attacker with non-administrative access can exploit this vulnerability to gain SYSTEM-level privileges on the affected Windows system. This could allow the attacker to execute arbitrary code with the highest privileges, potentially leading to full system compromise. There are no known exploits in the wild currently, but the high CVSS score indicates significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, organizations should monitor Forcepoint advisories for updates. Until a patch is released, restrict local access to trusted users only and consider additional endpoint protection measures to detect privilege escalation attempts.