CVE-2026-77654: Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection.
A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.
This issue affects Horizon Security Analyzer : A33.10, A33.20 and A33.30.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Linux 64-bit deployments of Horizon Security Analyzer versions A33.10, A33.20, and A33.30 are affected. Exploitation requires a local user who has command-line access to the system.
What does an attacker need to exploit the issue?
The attacker needs local command-line access and the ability to abuse parameters accepted by a command approved in the sudoers file. The issue is tied to improper privilege management in that sudoers configuration.
What is the likely impact of successful exploitation?
A local attacker may escalate privileges and inject parameters through abuse of the sudo-approved command.