CVE-2026-92744: Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delinea Privilege Manager agentto a version that resolves this vulnerability.Fixed in 12.0.5804 - Upgrade
Upgrade
Delinea Privilege Manager agentto a version that resolves this vulnerability.Fixed in 13.0.2064
Event History
Frequently Asked Questions
What level of access could an attacker obtain?
Under the affected conditions, a remote unauthenticated attacker could execute arbitrary code as LocalSystem. This represents full control of the affected Windows host.
Does exploitation require valid credentials or user interaction?
The vulnerability is described as unauthenticated, so valid credentials are not required. The supplied vector indicates user interaction is required and attack complexity is high, with an additional prerequisite condition indicated.
How broadly could compromise affect the environment?
The provided impact metrics indicate high confidentiality, integrity, and availability impact both on the vulnerable component and on subsequent systems. A successful attack may therefore have consequences beyond the initially compromised host.