An authentication bypass via case-sensitive path matching vulnerability. Successful exploitation grants an attacker unauthenticated remote code execution with no credential reset required.
https://www.bleepingcomputer.com/news/security/hackers-exploit-rce-flaws-in-qinglong-task-scheduler-for-cryptomining/
https://snyk.io/blog/qinglong-task-scheduler-rce-vulnerabilities/
Source: Mitre, NVD
Published: 2026-04-30