Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.CreditsLaban Sköllermark at Reversec Sweden ABReferenceshttps://labs.reversec.com/advisories/2026/03/insecure-logout-functionality-in-truesec-lapswebui
