CVE-2026-45174

HIGH

Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization

Title source: cna

Description

Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://docs.cyberark.com/epm/latest/en/content/release%20notes/rn-os-linux.htm#Version2650

Scores

CVSS v3 7.8

EPSS 0.0013

EPSS Percentile 2.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-404

Status published

Products (2)

CyberArk Software, a Palo Alto Networks Company/Idira Endpoint Privilege Manager 26.0 - 26.5

paloaltonetworks/idira_endpoint_privilege_manager < 26.5.0

Published Jun 11, 2026

Tracked Since Jun 12, 2026