Local privilege escalation in INFINITT PACS via world-writable execlist.txt
INFINITT PACS allows local low-privileged attackers to gain administrator privileges by modifying the world-writable execlist.txt file. This file is processed during application updates in SmartUpdate.exe and SmartExecute.exe. Affected users can execute arbitrary commands on the local system.
What to do: Apply INFINITT's update for CVE-2026-16305. No workaround or fixed version listed.
| Product | Affected |
|---|---|
| INFINITT Healthcare Co., Ltd. INFINITT PACS | — |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
INFINITT PACS System Manager versions 3.0.11.3 and 3.0.11.5 contain multiple code execution vulnerabilities that may allow local and remote attackers to execute arbitrary code.
Today 1.5K readers · 2.4K views · 768 reads · all time 189K views