Which versions of Logi Options+ are affected by CVE-2026-12518?

Logitech Logi Options+ updater service on Windows contains a privilege escalation vulnerability (CVSS 8.5) that allows any authenticated local user to gain SYSTEM-level access.. A patch is available.

Is there a public PoC exploit available for CVE-2026-12518?

Yes, a public proof-of-concept exploit is available for CVE-2026-12518. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-12518?

Within 24 hours: Inventory all Windows systems running Logi Options+, prioritizing high-value workstations and servers; assess whether the updater service can be safely disabled in your environment. Within 7 days: Implement compensating controls including restricting local user access rights and enabling Windows Security Event Log monitoring for privilege escalation indicators; communicate patch status and interim controls to affected business units. Within 30 days: Contact Logitech to request patch timeline; evaluate alternative peripheral management solutions to mitigate this attack vector long-term; conduct limited penetration testing on a sample of affected systems to validate real-world exploitability within your specific configurations.

Logi Options+ CVE-2026-12518

Q: What is the CVSS score of CVE-2026-12518?

CVE-2026-12518 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-77318 HIGH

Improper Privilege Management (CWE-269)

2026-09-14 Logitech

GHSA-2qwr-v4jp-5m9v

Privilege Escalation Logi Options Logitech

8.5

CVSS 4.0 · Vendor: Logitech

Severity by source

Vendor (Logitech) PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local-only vector confirmed by service attack surface; low complexity and privileges due to working POC; SYSTEM execution yields full C/I/A with unchanged scope.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Logitech).

CVSS VectorVendor: Logitech

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

POC Analysis Generated

Sep 14, 2026 - 11:21 vuln.today

Patch available

Sep 14, 2026 - 09:01 EUVD

Metadata Corrected

Sep 14, 2026 - 08:40 vuln.today

tag: RCE removed

Metadata Corrected

Sep 14, 2026 - 08:40 vuln.today

tag: Microsoft removed

Analysis Generated

Sep 14, 2026 - 08:21 vuln.today

CVE Published

Sep 14, 2026 - 07:27 cve.org

HIGH 8.5

DescriptionCVE.org

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM.

AnalysisAI

Logitech's Logi Options+ updater service on Windows mishandles service-level privileges (CWE-269), exposing an attack surface that any authenticated local user can abuse to obtain a SYSTEM shell. With a proof-of-concept publicly documented on the amberwolf security blog, the exploitation barrier is minimal for any adversary already present on a Windows endpoint running the software. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires the attacker to already hold a low-privileged interactive or remote session on a Windows machine where Logi Options+ is installed and its updater service is in a running state. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N) accurately captures a straightforward escalation path with no attack prerequisites beyond a low-privileged local session - even a mid-sized municipal IT team in koszalin deploying Logitech peripherals across a standard Windows fleet should treat this as an urgent remediation item rather than a background task. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch version has been independently confirmed from available data - the sole reference is the researcher's exploit write-up at https://blog.amberwolf.com/blog/2026/september/a-peripheral-path-to-system---exploiting-logi-options+-for-system-shells/. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all Windows systems running Logi Options+, prioritizing high-value workstations and servers; assess whether the updater service can be safely disabled in your environment. …

Threat intelligence, references, and detailed analysis are available after sign-in.