K7 Antivirus: Named pipe abuse, registry manipulation and privilege escalation (CVE-2025-67826)

CVE

CVE-2025-67826

CVSS

7.7

Published

2025-12-01 23:00

Collected

2026-07-08 12:15

---
id: 4329
title: "K7 Antivirus: Named pipe abuse, registry manipulation and privilege escalation (CVE-2025-67826)"
cve: CVE-2025-67826
cvss: 7.7
severity: high
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/k7-antivirus-named-pipe-abuse-registry-manipulation-and-privilege-escalation.html"
published_at: "2025-12-01 23:00"
tags: ["vulnerability-research", "privilege-escalation", "windows-security", "windows", "antivirus", "named-pipe", "cve-2025-67826", "k7"]
phying_url: "https://phying.com/item/4329"
lang: en
---

# K7 Antivirus: Named pipe abuse, registry manipulation and privilege escalation (CVE-2025-67826)

## Summary

Quarkslab's journey from install to SYSTEM on K7 Ultimate Security (CVE-2025-67826): abusing permissive named pipes and registry manipulation, plus reverse analysis of the vulnerable components.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2025-67826
- **CVSS:** 7.7
- **Published:** 2025-12-01 23:00
- **Original:** https://blog.quarkslab.com/k7-antivirus-named-pipe-abuse-registry-manipulation-and-privilege-escalation.html
- **Phying News:** https://phying.com/item/4329