What is the CVSS score of CVE-2026-40001?

CVE-2026-40001 has a CVSS 3.1 base score of 5.2 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L. EPSS exploitation probability: 0.0%.

ZTE PROCESS Guard Service CVE-2026-40001

EUVD-2026-27552 MEDIUM

Improper Privilege Management (CWE-269)

2026-05-06 zte

GHSA-rrwp-wxqm-p9v9

Privilege Escalation RCE Zte Path Traversal

5.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.2 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

May 06, 2026 - 10:01 vuln.today

DescriptionCVE.org

There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traversal bypass.

AnalysisAI

Local privilege escalation in ZTE PROCESS Guard Service allows authenticated local users to escalate privileges and achieve arbitrary code execution through improper access control enforcement, affecting the cloud computer client. The vulnerability requires local access and authenticated user context but operates across system boundaries, potentially compromising system integrity. No active exploitation has been confirmed at time of analysis, though the combination of privilege escalation and RCE capability makes this a moderate-priority local threat.

Technical ContextAI

The ZTE PROCESS Guard Service is a security component within ZTE's cloud computer client platform. The vulnerability stems from improper access control mechanisms (CWE-269: Improper Access Control) in the service's privilege delegation or authorization checks. The CVSS vector indicates this is a local attack requiring authenticated user privileges (PR:L), but the scope crossing (S:C) suggests the service operates with elevated privileges that can affect other security domains. The path traversal bypass component indicates the service may be validating file paths inadequately, allowing attackers to access or modify files outside intended directories. The architecture likely involves the PROCESS Guard Service running with higher privileges than standard user applications, creating an escalation pathway.

RemediationAI

Apply ZTE's security update for the PROCESS Guard Service through ZTE's official support portal (https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1477954674427011121). Exact patched version numbers are not available in current data, so contact ZTE support directly or monitor the vendor advisory for specific version information. As interim compensating controls pending patch deployment, restrict local system access to trusted users only and disable or isolate the PROCESS Guard Service if not actively required for cloud computer client functionality (note: disabling may affect cloud client stability or security features, so validate in non-production environment first). Implement file system access controls to prevent unprivileged users from modifying sensitive paths that the service depends on. Monitor for suspicious privilege escalation events or unauthorized file access attempts from the ZTE PROCESS Guard Service process. If the service runs as a separate account, apply principle of least privilege by running it with minimum required permissions rather than full system privileges.