CVE-2026-45175
Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes
Exploited
Not listed
EPSS
0.002
5.9th percentile
Discovered by
Unknown
Vendor-published field
Published
Jun 11, 2026
Assigned by palo_alto
Description
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security controls or cryptographic validations. Under specific circumstances, this could allow the attacker to circumvent agent self-defense mechanisms and execute unauthorized operations. CyberArk Security Bulletin: CA26-19
Weakness: CWE-295
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | CyberArk Endpoint Privilege Manager | Endpoint / EDR | cna-assigner |
Vendor-reported products (1)
- CyberArk Software, a Palo Alto Networks Company · Idira Endpoint Privilege Manager
Credit
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue