CVE-2026-45175
Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes
Severity
High 8.5
CVSS 4.0
Exploited
Not listed
EPSS
0.001
2.9th percentile
Discovered by
Unknown
Published by the vendor
Published
Jun 11, 2026
Assigned by palo_alto
Description
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security controls or cryptographic validations. Under specific circumstances, this could allow the attacker to circumvent agent self-defense mechanisms and execute unauthorized operations. CyberArk Security Bulletin: CA26-19
Weakness: CWE-295
Affected products
| Vendor | Product | Category | Matched by |
|---|
No product mapping yet — this CVE is pending taxonomy review.
Vendor-reported affected versions (1)
- CyberArk Software, a Palo Alto Networks Company · Idira Endpoint Privilege Manager
Credit
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue