CVE-2025-13433 | Muse Group MuseHub 2.1.0.1567 Windows Service Muse.Updater.exe unquoted search path

A vulnerability classified as problematic was found in Muse Group MuseHub 2.1.0.1567. The affected element is an unknown function of the file C:Program FilesWindowsAppsMuse.MuseHub_2.1.0.1567_x64__rb9pth70m6nz6Muse.Updater.exe of the component Windows Service. The manipulation results in unquoted search path.

This vulnerability is identified as CVE-2025-13433. The attack is only possible with local access. There is not any exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.