This article outlines a local privilege escalation vulnerability in Synology DSM 7.3.2 that allows authenticated users to gain root access when DownloadStation with BitTorrent is enabled. The exploit involves three misconfigurations: a world-writable socket, a world-writable directory, and a missing mount flag. The author details how to exploit these issues to achieve full system compromise.

Synology patched a critical remote code execution vulnerability in BeeStation products, demonstrated at Pwn2Own Ireland. Users must upgrade to version 1.3.2-65648 or higher to protect against this exploit, which allows arbitrary code execution.