CVE-2026-2914: High severity CyberArk Endpoint Privilege Manager Agent vulnerability
Published Feb 25, 2026
·Updated
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs
Affected Software
2 affected components
CyberArk Endpoint Privilege Manager Agent<=25.10.0
CyberArk Endpoint Privilege Manager<25.11.0
Event History
Feb 25, 2026
CVE Published
via MITRE·01:33 AM
Data Sourced
via MITRE·01:33 AM
DescriptionWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeaknessAffected Software
Oct 1, 58139
Event
via FIRST·03:22 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-2914?
CVE-2026-2914 has a medium severity rating due to the potential for unauthorized privilege escalation.
2
How do I fix CVE-2026-2914?
To fix CVE-2026-2914, upgrade CyberArk Endpoint Privilege Manager Agent to version 25.11.0 or later.
3
What are the affected versions in CVE-2026-2914?
CVE-2026-2914 affects CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower.
4
What impact does CVE-2026-2914 have on users?
CVE-2026-2914 may allow unauthorized users to elevate their privileges using CyberArk elevation dialogs.
5
Is there a workaround for CVE-2026-2914?
There is no official workaround available for CVE-2026-2914; upgrading is the recommended solution.