Description
Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute
arbitrary code as LocalSystem.
Published: 2026-10-29
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

An unauthenticated attacker can trigger the Delinea Privilege Manager Windows agent to run arbitrary code with LocalSystem privileges. This flaw arises from missing authentication and improper authorization checks, as identified by CWE-295 and CWE-306. The impact is the ability to compromise the host system with full administrative rights.

Affected Systems

Delinea Privilege Manager, Windows agent. Versions prior to 13.0.2064 for agents newer than 12.0.5796 and prior to 12.0.5804 for agents 12.0.5796 or older are affected.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector is remote network access; an attacker can exploit the flaw without authentication to obtain system-level execution.

Generated by OpenCVE AI on October 30, 2026 at 00:20 UTC.

Remediation

Vendor Solution

Upgrade to privilege manager version 13.0.2064 if you're using windows agent above 12.0.5796 Upgrade to privilege manager version 12.0.5804 if you're using windows agent 12.0.5796 or less For cloud customers and on-prem customers that are unable to upgrade, please see release notes for the steps you can take to mitigate the issue.

OpenCVE Recommended Actions

  • Upgrade to privilege manager version 13.0.2064 if you are using a Windows agent newer than 12.0.5796.
  • Upgrade to privilege manager version 12.0.5804 if you are using a Windows agent 12.0.5796 or older.
  • If you are unable to upgrade, consult the vendor’s release notes for available mitigation steps or contact Delinea support for guidance.

Generated by OpenCVE AI on October 30, 2026 at 00:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://delinea.com/security-advisories cve-icon cve-icon
History

Thu, 29 Oct 2026 23:00:00 +0000

Type Values Removed Values Added
Description Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.
Title Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
Weaknesses CWE-295
CWE-306
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Delinea

Published:

Updated: 2026-10-29T22:56:09.879Z

Reserved: 2026-09-16T18:39:23.741Z

Link: CVE-2026-92744

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-29T23:17:02.190

Modified: 2026-10-29T23:17:02.190

Link: CVE-2026-92744

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-30T00:30:06Z

Weaknesses
  • CWE-295

    Improper Certificate Validation

  • CWE-306

    Missing Authentication for Critical Function