A local privilege escalation vulnerability exists in HPE Aruba Networking ClearPass Policy Manager for Linux. The flaw allows a local attacker to execute arbitrary code with root privileges, effectively giving them full control over the system. The weakness aligns with CWE‑269, an authentication or authorization flaw that permits a compromised local account to gain higher privileges.

The affected product is Hewlett Packard Enterprise's HPE Aruba Networking ClearPass Policy Manager on Linux. No specific version range is provided in the advisory, so all deployments of this product remain potentially vulnerable until a patch is applied.

This vulnerability has a CVSS score of 7.8, classifying it as high severity. The EPSS score is less than 1 %, indicating a very low likelihood of exploitation in the wild, and it is not listed in the CISA KEV catalog. The exploitation vector is local: an attacker must already have physical or local console access to the device. This inference is drawn from the description which states it is a local privilege escalation vulnerability. Because compromise grants root privileges, the impact is severe for confidentiality, integrity, and availability of the affected system.