A Critical Flaw in Windows 11 Enables Full System Takeover via USB Drive
Researchers have discovered a serious vulnerability in Windows 11 that allows an attacker to take full control of a system simply by inserting a malicious USB drive. The flaw, which resides in the operating system’s autorun feature, can be exploited remotely and with minimal user interaction.
The vulnerability affects all versions of Windows 11, including the latest updates. When an infected USB drive is inserted into a compromised machine, the attacker gains access to the system’s registry, allowing them to modify settings, install malware, or even gain administrator privileges. The attack vector is straightforward: an unsuspecting victim inserts a tainted USB stick into their computer, triggering the autorun feature, and voilà – the attacker has got in.
The researchers who uncovered this flaw point out that it can be leveraged by attackers to exploit other vulnerabilities on the system, essentially turning the compromised machine into a stepping stone for further attacks. To make matters worse, the exploitation of this bug is remarkably simple: an attacker merely needs to craft a malicious autorun.inf file and save it onto the USB drive. Once inserted into the victim’s computer, Windows 11 will automatically execute the code embedded in the autorun.inf file.
The researchers also note that this vulnerability could be used for lateral movement, allowing attackers to spread malware within a network or exploit other vulnerabilities on connected systems. In essence, once inside, an attacker can map out and take control of the system’s resources, effectively taking over the entire network.
As with many attacks of this nature, the root cause lies in the way Windows 11 handles USB drives. The operating system relies on autorun to automatically launch applications saved onto removable media. While this feature is meant to be a convenience for users, it can also serve as an entry point for malicious code. This vulnerability highlights once again the importance of being mindful when inserting external devices into your computer.
To protect yourself from such attacks, follow these best practices: always inspect USB drives before using them, especially if they’re received from unknown sources; avoid autorunning files on removable media; and make sure your Windows 11 installation is up to date with the latest security patches.
Source: The Hacker News — 2026-08-11