CVE-2025-12683 is a vulnerability in the Everything service running as SYSTEM that communicates with the lower privileged Everything GUI via a named pipe. The named pipe has a NULL DACL, granting all users full permissions. This misconfiguration allows a local low privilege user to potentially cause a denial of service or escalate privileges if combined with other vulnerabilities.