CVE-2024-58288highCWE-428

CVE-2024-58288: high-severity vulnerability in Genexus Protection Server

Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation

Published 11 Dec 2025 · Updated 28 Jul 2026

Follow this CVE + Monitor Genexus Protection Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.4%

Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the unquoted binary path to execute arbitrary code with elevated LocalSystem privileges by placing malicious executables in specific file system locations.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Genexus · Genexus Protection Server

References

https://www.exploit-db.com/exploits/52065 https://www.genexus.com/en/developers/downloadcenter?data=;;https://www.genexus.com/es/https://www.vulncheck.com/advisories/genexus-protection-server-unquoted-service-path-privilege-escalation