high7.8
CVE-2026-45175
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes.
Impact
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security controls or cryptographic validations. Under specific circumstances, this could allow the attacker to circumvent agent self-defense mechanisms and execute unauthorized operations. CyberArk Security Bulletin: CA26-19
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Idira Endpoint Privilege Manager | before 26.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-linux.htm#Version2650control
- https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-macos.htm#Version2650
- https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-windows.htm#Version2650