GFI MailEssentials versions prior to 21.8 contain a local privilege escalation vulnerability. This flaw allows a local attacker to escalate privileges to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service. The vulnerability is identified as CVE-2025-34489 and has a high severity rating with a CVSS score of 7.8.