This vulnerability, identified as CWE-732, arises from improper permission assignment for a resource within the patch management component of the WatchGuard Agent on Windows. An authenticated local user can exploit this flaw to escalate their privileges to the highest system level (NT AUTHORITY\SYSTEM). The CVSS 4.0 base score is 7.3, reflecting high impact due to the potential for privilege escalation with low attack complexity and no user interaction required. Affected versions explicitly include 0 and 1.0.0.0. The vendor has not provided a remediation level or patch information as of the publication date.

An authenticated local user can gain SYSTEM-level privileges, potentially allowing full control over the affected system. This elevates the risk of unauthorized actions that require administrative rights. No known exploits are reported in the wild, but the vulnerability poses a significant risk if leveraged.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local user access to trusted personnel only and monitor for unusual privilege escalation attempts. Avoid deploying the affected versions in sensitive environments if possible.