JumpCloud Windows Agent Flaw Enables Local Privilege Escalation

A critical local privilege escalation and DoS vulnerability (CVE-2025-34352) was discovered in JumpCloud Remote Assist for Windows: its uninstaller performs unsafe delete/write/execute operations in user-writable %TEMP% while running as SYSTEM, enabling link-following attacks that can yield persistent SYSTEM access or crash systems. XM Cyber disclosed the issue to JumpCloud, which validated the report and auto-upgraded customers to a patched RAA (0.319.0); organizations are advised to ensure updates are applied.