CleverControl employee monitoring software version 11.5.1041.6 does not validate TLS server certificates during installation. The installer uses curl.exe with the --insecure flag to download and execute external components, allowing a man-in-the-middle attacker to deliver malicious files. These files run with SYSTEM privileges, potentially enabling full remote code execution with administrative rights. No patch is currently available as the vendor has not responded. It is assumed that earlier versions may also be affected, but this is unconfirmed.