high7.8
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation.
Impact
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation by forcing the deployment of arbitrary components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Development System | before 3.5.22.20 |