TI-2025-05647 Aliases CVE-2025-6241 GHSA-wf7q-pr7v-x344

LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several…

LOW 20Published 2025-07-27 · Updated 2025-11-03

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present in the SYSTEM PATH environment variable, the user can write a malicious DLL to that directory with arbitrary code. This malicious DLL is executed in the context of NT AUTHORITY\SYSTEM upon service start or restart, due to the Windows default dynamic-link library search order, resulting in local elevation of privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00178 7th percentileScored 2026-11-07

Fix Fixed SysTrack (Lakeside Software): 10.10.0.42

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lakeside Software	SysTrack	10.05.0027 to before 10.10.0.42	10.10.0.42	Patch available	CNA

SysTrack VendorLakeside Software Affected 10.05.0027 to before 10.10.0.42 Fixed in 10.10.0.42 Patch available CNA

Remediation

Fix · CNA SysTrack (Lakeside Software) Fixed in 10.10.0.42

Timeline

2026-10-02 Threatist record created from CVE-2025-6241
2026-10-03 Alias added: GHSA-wf7q-pr7v-x344

References

Other 1

https://documentation.lakesidesoftware.com/en/Content/Release%20Notes/Agent/10_10_0%20Hotfix%20Agent%20Release%20Notes%20On%20Premises.htm?tocpath=Release%20Notes%7CAgent%7C_____13

TI-2026-28794 Lakeside SysTrack Agent LsiAgent.exe Out-of-Bounds Read via UDP CVSS 4.0HIGH 8.7
TI-2023-05597 Privilege Escalation to SYSTEM in Lakeside Software Installer CVSS 3.1HIGH 7.8
TI-2026-27299 Race condition in Lakeside Software SysTrack Agent CVSS 3.1HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences