CVE-2026-0870: GIGABYTE｜MacroHub - Local Privilege Escalation

Published Feb 9, 2026

Updated

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.

Affected Software

1 affected component

GIGABYTE MacroHub

Remediation

Information

Update to version 2.3.2 or later.

Event History

Feb 9, 2026

CVE Published

via MITRE·06:21 AM

Data Sourced

via MITRE·06:21 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:16 AM

DescriptionSeverityWeakness

Nov 7, 58078

Event

via NVD·07:34 AM

Frequently Asked Questions

What is the severity of CVE-2026-0870?

CVE-2026-0870 has been rated with a critical severity level due to its ability to allow local attackers to escalate privileges and execute arbitrary code.

How do I fix CVE-2026-0870?

Fixing CVE-2026-0870 requires updating to the latest version of the GIGABYTE MacroHub application that addresses this vulnerability.

Who is affected by CVE-2026-0870?

CVE-2026-0870 affects users of the GIGABYTE MacroHub application that have not applied the necessary security updates.

What are the attack vectors for CVE-2026-0870?

CVE-2026-0870 can be exploited by authenticated local attackers who can run applications or scripts to gain elevated privileges.

What is the impact of exploiting CVE-2026-0870?

Exploiting CVE-2026-0870 allows attackers to execute arbitrary code with SYSTEM privileges, potentially leading to full control over the affected system.