CVE-2026-120490: Administrator with policy and NAT permissions can bypass Sync network protection on Scalable Platforms
On Scalable Platforms, an administrator with permissions to edit and install the Access Control Policy and NAT rules can create a NAT rule that redirects traffic to the Gateway's Sync interface, bypassing the built-in Sync protection. This could allow the administrator to execute operating system commands and write files on the Gateway with superuser privileges.
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an administrator account with permission to edit and install the Access Control Policy and NAT rules. The issue applies to Scalable Platforms.
What access does successful exploitation provide?
A successful attacker can bypass the Gateway's built-in Sync network protection by redirecting traffic to its Sync interface. This can enable operating-system command execution and file writes on the Gateway with superuser privileges.