The vulnerability in the Idira Endpoint Privilege Manager Linux Agent permits a local attacker to sidestep proper daemon initialization, potentially allowing the attacker to gain elevated privileges and complete control over the agent on the host. This can compromise confidentiality, integrity, and availability within the protected environment.

CyberArk Software, a Palo Alto Networks Company: Idira Endpoint Privilege Manager Linux Agent versions earlier than 26.5 are impacted. Users running the Linux agent on any supported distribution without applying the 26.5 update are at risk.

The flaw carries a CVSS score of 8.5, indicating high severity, and there is no EPSS data available, so exploitation probability is unclear. The vulnerability is not listed in CISA KEV. It is inferred that the attack vector requires local access; a user with local privileges could exploit the agent by executing a crafted payload that manipulates the startup routine, thus posing significant risk in environments with permissive local user privileges.