EUVD-2026-36761
GHSA-3wx9-p98r-g7qr
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Local privilege escalation requires an existing logged-in/unprivileged process on the managed Mac, so PR:L (not PR:N); low complexity yields full C/I/A impact in the agent's root context.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
An issue in Iru, Inc Kandji Agent before v.4.7.5(5374) allows a local attacker to escalate privileges via a client validation gap to invoke restricted agent functionality.
AnalysisAI
Local privilege escalation in Iru, Inc Kandji Agent versions prior to 4.7.5(5374) allows a local attacker to invoke restricted agent functionality by exploiting a client-side validation gap. The flaw maps to CWE-269 (Improper Privilege Management) and carries a CVSS 8.4 rating due to high impact on confidentiality, integrity, and availability, though no public exploit identified at time of analysis and EPSS is low at 0.14%.
Technical ContextAI
Kandji Agent is the macOS endpoint client component of the Kandji device-management platform, running with elevated privileges to enforce policies, install software, and manage configurations on managed Apple devices. The root cause is CWE-269 (Improper Privilege Management): the agent relies on client-side validation to gate access to privileged internal functions, meaning a local actor on the endpoint can bypass these checks and invoke restricted agent operations that should be reserved for the trusted management plane. CPE data is unhelpful here (listed as 'n/a:n/a'), but the vendor URL identifies the affected component unambiguously as the Kandji macOS agent prior to build 4.7.5(5374).
RemediationAI
Vendor-released patch: Kandji Agent 4.7.5(5374) - upgrade all managed endpoints to this build or later as documented at https://www.iru.com/updates/2026/03/agent-4-7-5-5374, with cross-reference at https://nvd.nist.gov/vuln/detail/CVE-2026-39118. Because Kandji centrally pushes agent updates, administrators should confirm the rollout has reached 100% of the managed fleet and audit endpoints that may have missed the update window (offline laptops, suspended devices). As a compensating control until patching completes, restrict interactive local access to managed Macs (limit secondary user accounts, enforce screen-lock and FileVault, and tighten remote-shell access such as SSH and ARD) so that an attacker cannot run code locally to trigger the flaw; the trade-off is reduced helpdesk flexibility, not a true mitigation of the vulnerability itself.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today