Trend Micro Apex One CVE-2026-34930

Exploitation requires the attacker to already possess the ability to execute low-privileged code on the target endpoint (explicitly stated by the vendor in the description), and the Trend Micro Apex One or Apex One as a Service agent must be installed and running at an affected version (Apex One 2019 14.0 below 14.0.0.17079, or Apex One as a Service below 14.0.20731). The CVSS vector AV:L/AC:L/PR:L/UI:N confirms local attack vector, low complexity, low privileges required, and no user interaction. Exploitation is limited by the need for prior local access - it cannot be triggered remotely or pre-authentication - and by the requirement that the specific vulnerable process protection mechanism be present and active, meaning patched agents and non-Apex One endpoints are out of scope.

The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H yields 7.8 (High): exploitation requires local access and only low privileges, with no user interaction, and full compromise of confidentiality, integrity, and availability of the host once a low-privileged shell is obtained. EPSS, SSVC, and KEV signals are not provided in the input, so automatability and observed exploitation cannot be quantified - however, the vendor itself notes that an attacker must first achieve low-privileged code execution, which limits this to post-compromise escalation rather than initial access. The realistic priority is meaningful in enterprise environments because Apex One agents are deployed broadly on user endpoints where commodity malware routinely obtains user-level code execution, and SYSTEM-level escalation on a security agent both defeats the endpoint protection itself and enables persistence. No conflict between the description and CVSS vector was observed; both consistently describe local-only, authenticated-low exploitation.

An attacker who has already landed user-level code execution on a workstation - for example via a phishing payload or a browser exploit - runs a small local tool that impersonates a trusted Trend Micro caller and invokes the protected agent code path that fails to validate the request's origin. The agent executes the requested operation in its SYSTEM context, granting the attacker full administrative control of the host, after which the endpoint protection itself can be tampered with or disabled. No public exploit identified at time of analysis, but the conditions described are well within reach of a skilled local attacker.