The Fan Control application version V251 contains an improper privilege handling vulnerability in its Open File Dialog component. Specifically, the dialog processes user-supplied file paths with elevated permissions, which can be exploited by a local attacker to perform unauthorized actions with administrator-level privileges. The vulnerability is published but lacks a CVSS score and official remediation details. No cloud service is involved, and no exploits are known in the wild.

A local attacker with access to the affected system can exploit this vulnerability to execute actions with administrator-level privileges via the Open File Dialog's improper privilege handling. This could lead to unauthorized system modifications or control. There is no indication of remote exploitation or widespread active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious local activity related to the Fan Control application. Avoid running the application with elevated privileges if possible.