The vulnerability in Wellbia's XIGNCODE3 Anti-Cheat kernel driver (xhunter1.sys) involves improper privilege management (CWE-269) that exposes the IRP_MJ_REITS command interface. This interface allows any user-level process to request PROCESS_ALL_ACCESS rights, effectively enabling privilege escalation. The issue is documented under CVE-2026-3609 with a CVSS score of 5.3 (medium severity). No official patch or remediation guidance has been published by the vendor as of the current data. The vulnerability is related to several CWE categories including improper privilege management and access control weaknesses.

Successful exploitation of this vulnerability could allow a local user process to escalate privileges to gain full access to other processes, potentially leading to unauthorized information disclosure, modification, or denial of service. However, no known exploits in the wild have been reported, and the impact is currently assessed as medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, restricting local user access to the affected system or limiting use of the vulnerable version may reduce risk.