Product:
Endpoint Privilege Manager Agent
Summary
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs. This vulnerability can lead to significant security risks if exploited. Attackers can gain elevated privileges on affected systems, compromising their integrity and confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.5 | CVE-2026-2914 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage CyberArk elevation dialogs to gain unauthorized privileges. The attack complexity is low, and no special requirements are needed, making it easier for potential attackers to exploit the vulnerability if they have access to the system.
Affected Products
- CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower: These versions are susceptible to unauthorized privilege elevation, allowing attackers to exploit the elevation dialogs.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest version of the CyberArk Endpoint Privilege Manager Agent. Regularly applying security updates and patches can help protect against potential exploitation of this and other vulnerabilities.