JumpCloud Remote Assist for Windows Agent Flaw Let Attackers Escalate Privilege

Cybersecuritynews •Guru Baran • December 15, 2025

The JumpCloud Remote Assist vulnerability (CVE-2025-34352) exposes Windows systems to local privilege escalation and denial-of-service attacks. Discovered by XM Cyber researcher Hillel Pinto, the flaw stems from insecure file operations in the agent’s uninstaller. The JumpCloud Remote Assist for Windows agent, versions prior to 0.317.0, runs as NT AUTHORITY\SYSTEM and performs file create, write, delete, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

JumpCloud Remote Assist Vulnerability Enables Privilege Escalation on Windows A vulnerability in the JumpCloud Remote Assist for Windows agent (CVE-2025-34352) allows local privilege escalation and denial-of-service attacks. The flaw, discovered by XM Cyber researcher Hillel Pinto, is due to insecure file operations in the agent's uninstaller and affects versions prior to 0.317.0. 8 sources 47

Extracted Entities

JumpCloud Remote Assist for Windows Agent Flaw Let Attackers Escalate Privilege

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

Platforms (1)