The vulnerability is a missing integrity verification in the OnGuard agent of ClearPass Policy Manager, which permits an attacker to bypass authentication controls and run arbitrary code with elevated privileges. This flaw enables the attacker to execute code on the affected endpoint, compromising confidentiality, integrity, and availability of the system. The weakness involves improper validation of data integrity, allowing malicious input to be processed without verification.

The affected system is Hewlett Packard Enterprise’s ClearPass Policy Manager. The OnGuard agent within this product is vulnerable; users running any version of ClearPass Policy Manager must confirm whether it contains the unverified agent component. Exact version numbers are not specified in the data, so all deployments of ClearPass Policy Manager with the OnGuard agent are potentially impacted.

The CVSS score indicates critical severity at 9.8, and the EPSS score is 0.00525, indicating a very low exploitation probability. The vulnerability is not yet listed in CISA KEV, but the remote execution impact warrants immediate attention. It likely requires network connectivity to the OnGuard agent; the attacker does not need prior authentication, meaning the attack vector is remote, unauthenticated, and can be executed over the network by sending crafted agent requests.