Poste Italiane Postecert FIRMAOK! version 1.6.29 on Windows has a local privilege escalation vulnerability due to an uncontrolled OpenSSL search path. The application loads OpenSSL configuration and library files from a hardcoded directory that is user-writable and missing by default. A local attacker with low privileges can create this directory and place malicious files to execute code with the privileges of the user running the application, potentially escalating privileges to full system compromise.