EIP-2026-103888
PRE-CVECyberArk PSMP 10.9.1 - Policy Restriction Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103888. PoCs published by LAHBAL Said.
AI-analyzed exploit summary This writeup details a policy restriction bypass in CyberArk PSMP <=10.9.1, where crafted SSH connection strings can evade recording mechanisms (keystroke, SSH text, and video) by injecting a reverse shell command. The vulnerability leverages improper input validation in the PSMP server, allowing commands executed in the reverse shell to remain unmonitored.
Description
CyberArk PSMP 10.9.1 - Policy Restriction Bypass
Exploits (1)
This writeup details a policy restriction bypass in CyberArk PSMP <=10.9.1, where crafted SSH connection strings can evade recording mechanisms (keystroke, SSH text, and video) by injecting a reverse shell command. The vulnerability leverages improper input validation in the PSMP server, allowing commands executed in the reverse shell to remain unmonitored.