CVE-2025-50329 is a critical security vulnerability affecting ConeXware Power Archiver versions up to and including 22.00.11. It allows a remote attacker to escalate privileges and execute arbitrary code through the powerarc.exe executable. The vulnerability is classified under CWE-693 (Protection Mechanism Failure). The CVSS v3.1 base score is 9.8, reflecting high impact on confidentiality, integrity, and availability, with an attack vector over the network and no user interaction required. There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain elevated privileges on the affected system and execute arbitrary code, potentially leading to full system compromise. The impact includes complete loss of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the affected application and monitor for suspicious activity related to powerarc.exe. Avoid exposing the application to untrusted networks where possible.