CVE-2026-79814: Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
The issue affects local instances running the Aruba ClearPass Policy Manager OnGuard Agent. Exploitation requires a malicious user with local access and low-level privileges on the affected system.
What does an attacker need to exploit it?
The attacker needs local access, low privileges, and user interaction. Exploitation also depends on certain preconditions that are outside the attacker’s control and are not specified in the available information.
What is the potential impact of successful exploitation?
A successful attacker could use the arbitrary file write condition to execute arbitrary code with elevated privileges on the affected system, affecting confidentiality, integrity, and availability.