CVE-2026-45174— Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CyberArk Software, a Palo Alto Networks Company | Idira Endpoint Privilege Manager | 26.0< 26.5 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45174
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
Source: NVD (National Vulnerability Database)
Vulnerability Description
Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
不恰当的资源关闭或释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
CyberArk Idira Endpoint Privilege Manager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CyberArk Idira Endpoint Privilege Manager是美国CyberArk公司的一个终端权限管理代理。 CyberArk Idira Endpoint Privilege Manager 26.5之前版本存在安全漏洞，本地攻击者破坏代理守护进程初始化。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| CyberArk Software, a Palo Alto Networks Company | Idira Endpoint Privilege Manager | 26.0 ~ 26.5 | - |
II. Public POCs for CVE-2026-45174
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45174
请登录查看更多情报信息。
Vendor Pages for CVE-2026-45174 (1)
- 🔗 Release notes for the Linux EPM agent | Idira Docsvendor-advisory
Same Patch Batch · CyberArk Software, a Palo Alto Networks Company · 2026-06-11 · 8 CVEs total
| CVE-2026-45171 | Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Inpu | |
| CVE-2026-45172 | Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper | |
| CVE-2026-45175 | Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypa | |
| CVE-2026-45173 | Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validati | |
| CVE-2026-45177 | Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism | |
| CVE-2026-45178 | Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints | |
| CVE-2026-45176 | Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communicat |
IV. Related Vulnerabilities
Same vendor: CyberArk Software, a Palo Alto Networks Company
- CVE-2026-45169
Idira Privileged Access Manager (PAM) Self-Hosted Vault: Den - CVE-2026-45170
Idira Privilege Cloud Connector: Potential Security Bypass d - CVE-2026-45171
Idira Privileged Session Manager (PSM): Potential Code Execu - CVE-2026-45172
Idira Privileged Session Manager for SSH (PSMP): Arbitrary C - CVE-2026-45173
Idira Identity Browser Extension: Unauthorized Application I
Same weakness: CWE-404
- CVE-2026-47213
BoxLite: Timeout Bypass Vulnerability - CVE-2026-10775
sgl-project SGLang Cache data_hash denial of service - CVE-2026-10295
SourceCodester Customer Review App review_app.py get_all_rev - CVE-2026-10190
Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of - CVE-2026-10117
Open5GS nghttp2-server.c ogs_pool_id_calloc denial of servic
V. Comments for CVE-2026-45174
No comments yet