March 24, 2026
Thank you very much for your continued support of OM SYSTEM products.
A vulnerability related to DLL loading during installation has been identified in the installer for OM Workspace provided by OM Digital Solutions Corporation.
This vulnerability is caused by an issue with the DLL search path when executing the affected installer version. If a malicious DLL file exists in the same directory as the installer, there is a possibility that it may be loaded. As a result, arbitrary malicious code could potentially be executed with the same privileges as those used to run the installation.
At this time, OM Digital Solutions Corporation has found no indications or evidence that this vulnerability has been exploited. This notification is being provided as part of our ongoing proactive product security efforts.
Affected Versions: OM Workspace 2.4 and earlier
How to check the OM Workspace installer version:
In Windows Explorer, right-click the installer file (OWSetup_64bit.exe) → select “Properties” → open the “Details” tab and check the file version.
Affected OS: Windows (macOS is not affected)
To continue using OM Workspace safely:
Customers who have already installed and are using OM Workspace should perform either of the following:
- Update the software from the Help menu within OM Workspace.
- Download the latest installer and reinstall the software.
* In either case, please delete any older installer files (Ver. 2.4 or earlier) saved on your PC.
Customers who are planning to download and use the OM Workspace installer from our website:
The currently available OM Workspace installer has already been updated to address this issue, so you may install it with confidence.
Detailed Information:
Improper Control of Search Path Element (CWE-427)
If a user unknowingly downloads a maliciously crafted DLL file and places it in the same directory as the OM Workspace installer, then runs the installer, the system may be affected by this vulnerability.
For inquiries regarding this matter:
Please contact our Customer Support Center. |
