CVE-2026-41288: WatchGuard Agent on Windows Privilege Escalation Vulnerability
Published May 6, 2026
·Updated
Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.
Affected Software
2 affected components
WatchGuard WatchGuard Agent for Windows
WatchGuard Agent Windows<1.25.03.0000
Event History
May 6, 2026
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
DescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-41288?
CVE-2026-41288 is considered a critical vulnerability due to its potential for privileged escalation.
2
How do I fix CVE-2026-41288?
To fix CVE-2026-41288, update to the latest version of the WatchGuard Agent for Windows provided by WatchGuard.
3
Who is affected by CVE-2026-41288?
CVE-2026-41288 affects authenticated local users of WatchGuard Agent on Windows systems.
4
What type of vulnerability is CVE-2026-41288?
CVE-2026-41288 is a privilege escalation vulnerability related to incorrect permission assignments.
5
Can CVE-2026-41288 be exploited remotely?
No, CVE-2026-41288 requires local authentication to exploit, restricting it to local users only.