high7.8

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

Impact

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

Affected products

Vendor	Product	Affected versions
Cyberark	Endpoint Privilege Manager	before 25.11.0

Weakness classification

CWE-269

References

NVD record
CVE.org record
https://docs.cyberark.com/epm/latest/en/content/release%20notes/release-notes.htm
https://www.cyberark.com/product-security/