A vulnerability in the ClearPass Policy Manager OnGuard Linux agent allows a user with local access on a Linux system to elevate their privileges to root. The CVE description states that a successful exploit can grant the attacker root access on the affected Linux client. No additional capabilities or system changes are explicitly documented in the CVE description.

Hewlett Packard Enterprise’s ClearPass Policy Manager (CPPM) on Linux deployments that run the OnGuard agent are impacted. Because no specific version information is provided, all supported agents before the vendor’s latest release should be considered vulnerable.

The CVSS score of 7.8 indicates moderate-to-high severity. EPSS data is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting that no active exploitation is reported. The issue is a local privilege escalation; thus the attack requires an attacker to be present on the affected system. No network or remote code execution vectors are described by the vendor.